ip: unformat_ip_address should no modify its argument on failure