From 63f9ef24808b787d1d203aa87e18a0d8e8bb066f Mon Sep 17 00:00:00 2001
From: Dean Sheather <dean@deansheather.com>
Date: Thu, 6 Apr 2023 07:43:24 +1000
Subject: [PATCH] chore: fix minor int coercion codeql vulnerability (#7024)

---
 cli/agent.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/cli/agent.go b/cli/agent.go
index 706dc45d6c..697648b4a6 100644
--- a/cli/agent.go
+++ b/cli/agent.go
@@ -336,8 +336,8 @@ func urlPort(u string) (int, error) {
 		return -1, xerrors.Errorf("invalid url %q: %w", u, err)
 	}
 	if parsed.Port() != "" {
-		port, err := strconv.ParseInt(parsed.Port(), 10, 64)
-		if err == nil && port > 0 {
+		port, err := strconv.ParseUint(parsed.Port(), 10, 16)
+		if err == nil && port > 0 && port < 1<<16 {
 			return int(port), nil
 		}
 	}