[cpp-opensaml COMMIT] /branches/REL_2/saml/saml2/metadata/impl/XMLMetadataProvider.cpp

[noreply at shibboleth.net]

Author: scantor
Date: Wed Mar 14 01:30:54 2012
New Revision: 718

URL: http://svn.shibboleth.net/view/cpp-opensaml?rev=718&view=rev
Log:
https://issues.shibboleth.net/jira/browse/CPPOST-74

Modified:
    branches/REL_2/saml/saml2/metadata/impl/XMLMetadataProvider.cpp

Modified: branches/REL_2/saml/saml2/metadata/impl/XMLMetadataProvider.cpp
URL: http://svn.shibboleth.net/view/cpp-opensaml/branches/REL_2/saml/saml2/metadata/impl/XMLMetadataProvider.cpp?rev=718&r1=717&r2=718&view=diff
==============================================================================
--- branches/REL_2/saml/saml2/metadata/impl/XMLMetadataProvider.cpp (original)
+++ branches/REL_2/saml/saml2/metadata/impl/XMLMetadataProvider.cpp Wed Mar 14 01:30:54 2012
@@ -217,6 +217,12 @@
         throw MetadataException("Metadata instance failed manual validation checking.");
     }
 
+    const TimeBoundSAMLObject* validityCheck = dynamic_cast<TimeBoundSAMLObject*>(xmlObject.get());
+    if (!validityCheck || !validityCheck->isValid()) {
+        m_log.error("metadata instance was invalid at time of acquisition");
+        throw MetadataException("Metadata instance was invalid at time of acquisition.");
+    }
+
     // This is the best place to take a backup, since it's superficially "correct" metadata.
     string backupKey;
     if (!backup && !m_backing.empty()) {