From a14afd080498d06fe0c8a2c24c875d8559985bb6 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Bodo=20M=C3=B6ller?= Date: Fri, 30 Dec 2005 23:51:57 +0000 Subject: [PATCH] Rewrite timeout computation in a way that is less prone to overflow. (Problem reported by Peter Sylvester.) --- ssl/ssl_sess.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ssl/ssl_sess.c b/ssl/ssl_sess.c index da6b023c36..2f26593c70 100644 --- a/ssl/ssl_sess.c +++ b/ssl/ssl_sess.c @@ -389,7 +389,7 @@ int ssl_get_prev_session(SSL *s, unsigned char *session_id, int len) CRYPTO_add(&ret->references,1,CRYPTO_LOCK_SSL_SESSION); #endif - if ((long)(ret->time+ret->timeout) < (long)time(NULL)) /* timeout */ + if (ret->timeout < (long)(time(NULL) - ret->time)) /* timeout */ { s->ctx->stats.sess_timeout++; /* remove it from the cache */ -- 2.25.1