DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7536>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7536

Incorrect session timeout logic

           Summary: Incorrect session timeout logic
           Product: Axis
           Version: beta-1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Major
          Priority: Other
         Component: Basic Architecture
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


org.apache.axis.handlers.SimpleSessionHandler incorrectly determines whether or 
not a session has timed out.  On line 161, the ">" should be a "<":

if ((session.getTimeout() * 1000) > (curTime - session.getLastAccessTime()))

should be

if ((session.getTimeout() * 1000) < (curTime - session.getLastAccessTime()))

Reply via email to