-
Bug
-
Resolution: Done
-
Major
-
JBossAS-3.2.7 Final, JBossAS-4.0.2 Final, JBossAS-4.0.3RC2
-
None
-
Compatibility/Configuration
There is some unnecessary exposure of implementation details of units in the org.jboss.security.plugins.JaasSecurityManager.DomainInfo that shows up when the int defaultLifetime (units = seconds) value to the TimedCachePolicy ctor is within the range of Integer.MAX_VALUE to Integer.MAX_VALUE/1000 due to an unsafe conversion from seconds to milliseconds:
long expirationTime = 1000 * lifetime
where lifetime is an int. When defaultLifetime values are in this range, the result is a negative expiration time, and this disables caching. The current maximum value for expiration is therefore Integer.MAX_VALUE/1000 seconds.