[CXF-3576] Potential overflow for lifetime calculation in STSClient

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.4
• Fix Version/s: 2.4.1
• Component/s: WS-* Components
• Assignee: Christian Schneider
• Reporter: Oliver Wulff
• Created: 07/Jun/11 21:07
• Updated: 08/Aug/11 14:43
• Resolved: 08/Jun/11 07:29

Description

This code performs integer multiply and then converts the result to a long:
expirationTime.setTime(creationTime.getTime() + (ttl * 1000));

Fix:
expirationTime.setTime(creationTime.getTime() + (ttl * 1000L));