long xauth generate timeout crashes server

[kr-xquartz@…]

Running "ssh -o 'ForwardX11Timeout 24d21h' -X somehost somecommand..." crashes the XQuartz server for me with an assertion failure:

Assertion failed: (pAuth->timer == timer), function SecurityAuthorizationExpired, file security.c, line 313.

A timeout of 24d20h doesn't cause the problem.

From poking around on the net, it looks like it's a known problem reproducible with "xauth generate" with a long timeout, causing some sort of failure, but I kept running into a restricted-access bug report elsewhere.

I should be able to give a month, or a year, or several, for the timeout value. If some protocol bug prevents specification of a timeout that long, either a useful message should be presented or the timeout should be capped at the maximum, or both.

The crashing thread:

Thread 4 Crashed:
0   libsystem_kernel.dylib        	0x00007fff880b1ce2 __pthread_kill + 10
1   libsystem_c.dylib             	0x00007fff828ff7d2 pthread_kill + 95
2   libsystem_c.dylib             	0x00007fff828f0a7a abort + 143
3   libsystem_c.dylib             	0x00007fff829235de __assert_rtn + 146
4   X11.bin                       	0x000000010005270b SecurityAuthorizationExpired + 107
5   X11.bin                       	0x00000001000ffea1 TimerSet + 186
6   X11.bin                       	0x00000001000525db SecurityStartAuthorizationTimer + 68
7   X11.bin                       	0x0000000100052493 ProcSecurityGenerateAuthorization + 564
8   X11.bin                       	0x00000001000bc5d6 Dispatch + 257
9   X11.bin                       	0x000000010002717e dix_main + 185
10  X11.bin                       	0x0000000100011b73 server_thread + 38
11  libsystem_c.dylib             	0x00007fff828fd8bf _pthread_start + 335
12  libsystem_c.dylib             	0x00007fff82900b75 thread_start + 13

[jeremyhu@…]

This isn't a bug specific to XQuartz, so this should be filed at ​http://bugs.freedesktop.org