From b28ff501260d5b84779029ac22423fe88b3fcdc4 Mon Sep 17 00:00:00 2001
From: Harshavardhana <harsha@minio.io>
Date: Wed, 14 Dec 2016 08:02:32 -0800
Subject: [PATCH] lock/server: Check if the lock server itself is skewed back.
 (#3447)

---
 cmd/lock-rpc-server-common.go | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/cmd/lock-rpc-server-common.go b/cmd/lock-rpc-server-common.go
index eee2f6246..716028de6 100644
--- a/cmd/lock-rpc-server-common.go
+++ b/cmd/lock-rpc-server-common.go
@@ -58,9 +58,11 @@ func (l *lockServer) removeEntry(name, uid string, lri *[]lockRequesterInfo) boo
 }
 
 // Validate lock args.
+// - validate time stamp.
+// - validate jwt token.
 func (l *lockServer) validateLockArgs(args *LockArgs) error {
 	curTime := time.Now().UTC()
-	if curTime.Sub(args.Timestamp) > globalMaxSkewTime {
+	if curTime.Sub(args.Timestamp) > globalMaxSkewTime || args.Timestamp.Sub(curTime) > globalMaxSkewTime {
 		return errServerTimeMismatch
 	}
 	if !isRPCTokenValid(args.Token) {