luehe 2003/02/18 16:33:28
Modified: catalina/src/share/org/apache/catalina/session
StandardSession.java
Log:
Fix for Bugtraq 4688277:
Invoking session.invalidate() after setting max inactive interval to 0
does not throw IllegalStateException
The reason for this failure has been that setMaxInactiveInterval does not
expire the session immediately if the 'interval' argument equals 0.
Revision Changes Path
1.13 +7 -4
jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/session/StandardSession.java
Index: StandardSession.java
===================================================================
RCS file:
/home/cvs/jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/session/StandardSession.java,v
retrieving revision 1.12
retrieving revision 1.13
diff -u -r1.12 -r1.13
--- StandardSession.java 10 Feb 2003 09:59:01 -0000 1.12
+++ StandardSession.java 19 Feb 2003 00:33:27 -0000 1.13
@@ -495,6 +495,9 @@
public void setMaxInactiveInterval(int interval) {
this.maxInactiveInterval = interval;
+ if (isValid && interval == 0) {
+ expire();
+ }
}
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
