Uploaded image for project: 'Application Server 3  4  5 and 6'
  1. Application Server 3 4 5 and 6
  2. JBAS-2226

Unsafe handling of integer to long conversion in JaasSecurityManager.DomainInfo.

XMLWordPrintable

    • Compatibility/Configuration

      There is some unnecessary exposure of implementation details of units in the org.jboss.security.plugins.JaasSecurityManager.DomainInfo that shows up when the int defaultLifetime (units = seconds) value to the TimedCachePolicy ctor is within the range of Integer.MAX_VALUE to Integer.MAX_VALUE/1000 due to an unsafe conversion from seconds to milliseconds:

      long expirationTime = 1000 * lifetime

      where lifetime is an int. When defaultLifetime values are in this range, the result is a negative expiration time, and this disables caching. The current maximum value for expiration is therefore Integer.MAX_VALUE/1000 seconds.

              starksm64 Scott Stark (Inactive)
              starksm64 Scott Stark (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved: