Potential overflow for lifetime calculation in STSClient
--------------------------------------------------------

                 Key: CXF-3576
                 URL: https://issues.apache.org/jira/browse/CXF-3576
             Project: CXF
          Issue Type: Bug
          Components: WS-* Components
    Affects Versions: 2.4
            Reporter: Oliver Wulff
             Fix For: 2.4.1


This code performs integer multiply and then converts the result to a long:
expirationTime.setTime(creationTime.getTime() + (ttl * 1000));

Fix:
expirationTime.setTime(creationTime.getTime() + (ttl * 1000L));


--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to