From: Andrew Dolgov <noreply@fakecake.org>
Date: Thu, 13 Jul 2017 05:57:07 +0000 (+0300)
Subject: sessions: clip max expiry value to a 32bit integer
X-Git-Tag: 17.12~146
X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=b465c28ee038f93440ebb13ebfbbf529fd8149c7;p=tt-rss.git

sessions: clip max expiry value to a 32bit integer
---

diff --git a/include/sessions.php b/include/sessions.php
index d0532a01..adc973fe 100644
--- a/include/sessions.php
+++ b/include/sessions.php
@@ -9,7 +9,7 @@
 	require_once "lib/gettext/gettext.inc";
 	require_once "version.php";
 
-	$session_expire = max(SESSION_COOKIE_LIFETIME, 86400);
+	$session_expire = max(SESSION_COOKIE_LIFETIME, 86400) & 0xFFFFFFFF; // clip to 32 bit
 	$session_name = (!defined('TTRSS_SESSION_NAME')) ? "ttrss_sid" : TTRSS_SESSION_NAME;
 
 	if (@$_SERVER['HTTPS'] == "on") {