lucas theisen created DIRSERVER-1950:
----------------------------------------

             Summary: Unsafe cast to int in getPwdTimeBeforeExpiry calculation 
of AuthenticationInterceptor
                 Key: DIRSERVER-1950
                 URL: https://issues.apache.org/jira/browse/DIRSERVER-1950
             Project: Directory ApacheDS
          Issue Type: Bug
          Components: core
    Affects Versions: 2.0.0-M15
            Reporter: lucas theisen


        int pwdAge = ( int ) ( currentTime - changedTime ) / 1000;

Will cast to int before the division which causes overflow of int if the 
difference is too large.  Even with division, it could still be too large so it 
is unsafe to use an int value for pwdAge.  As it is only used for comparison, 
we can leave it as a long.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Reply via email to