https://bz.apache.org/bugzilla/show_bug.cgi?id=59181
Bug ID: 59181
Summary: Tomcat SessionManager incorrectly uses the Context's
sessionTimeout
Product: Tomcat 7
Version: 7.0.68
Hardware: All
OS: All
Status: NEW
Severity: major
Priority: P2
Component: Catalina
Assignee: [email protected]
Reporter: [email protected]
In Tomcat 7.0.68 with this commit:
http://svn.apache.org/viewvc/tomcat/tc7.0.x/tags/TOMCAT_7_0_68/java/org/apache/catalina/session/ManagerBase.java?r1=1726923&r2=1726924
The ManagerBase is incorrectly pulling Context.getSessionTimeout(). It should
be multiplying the session timeout by 60, since the Context's session timeout
is in minutes and the ManagerBase is in seconds.
The same change in Tomcat 8.0.x correctly multiplies by 60:
http://svn.apache.org/viewvc/tomcat/tc8.0.x/tags/TOMCAT_8_0_32/java/org/apache/catalina/session/ManagerBase.java?r1=1726196&r2=1726198
- Scott
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
