From a419c0354d0552c112fe0f5ba503853288061c91 Mon Sep 17 00:00:00 2001 From: Timo Sirainen Date: Fri, 17 Nov 2017 14:56:20 +0200 Subject: [PATCH] director: Make sure user's timestamp isn't set to future The sending director could have the system clock slightly in the future. --- src/director/director-connection.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/director/director-connection.c b/src/director/director-connection.c index aacc58d964..62eaf25bb2 100644 --- a/src/director/director-connection.c +++ b/src/director/director-connection.c @@ -718,6 +718,10 @@ director_handshake_cmd_user(struct director_connection *conn, return FALSE; } + if (timestamp > ioloop_time) { + /* make sure we don't set user's timestamp to future */ + timestamp = ioloop_time; + } (void)director_user_refresh(conn, username_hash, host, timestamp, weak, &forced, &user); if (user->timestamp < timestamp) { -- 2.47.3