DO NOT REPLY [Bug 10656] New: - Session Timeout incorrect for 0 in web.xml

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=10656>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=10656

Session Timeout incorrect for 0 in web.xml

           Summary: Session Timeout incorrect for 0 in web.xml
           Product: Tomcat 4
           Version: 4.0.3 Final
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: Servlet & JSP API
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: frankfebbraro@earthlink.net


According to the Servlet 2.3 Specification about the <session-timeout> tag in 
the web.xml file:

The session-timeout element defines the default session timeout interval for 
all sessions created in this web application. The specified timeout must be 
expressed in a whole number of minutes. If the timeout is 0 or less, the 
container ensures the default behaviour of sessions is never to time out.

The code for the Session allows the session to remain alive forever if the 
timeout is < 0 but not == to zero.

The error (I think) is in StandardManager.processExpires()

if (maxInactiveInterval < 0)

should be

if (maxInactiveInterval <= 0)

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>