Uploaded image for project: 'Application Server 3  4  5 and 6'
  1. Application Server 3 4 5 and 6
  2. JBAS-2226

Unsafe handling of integer to long conversion in JaasSecurityManager.DomainInfo.

    XMLWordPrintable

Details

    • Compatibility/Configuration

    Description

      There is some unnecessary exposure of implementation details of units in the org.jboss.security.plugins.JaasSecurityManager.DomainInfo that shows up when the int defaultLifetime (units = seconds) value to the TimedCachePolicy ctor is within the range of Integer.MAX_VALUE to Integer.MAX_VALUE/1000 due to an unsafe conversion from seconds to milliseconds:

      long expirationTime = 1000 * lifetime

      where lifetime is an int. When defaultLifetime values are in this range, the result is a negative expiration time, and this disables caching. The current maximum value for expiration is therefore Integer.MAX_VALUE/1000 seconds.

      Attachments

        Activity

          People

            starksm64 Scott Stark (Inactive)
            starksm64 Scott Stark (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: