When parsing cookie expiration times, saturate out of range dates

net/cookies/canonical_cookie.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_COOKIES_CANONICAL_COOKIE_H_
 #define NET_COOKIES_CANONICAL_COOKIE_H_
 
 #include <memory>
 #include <string>
 #include <vector>
@@ skipping 121 matching lines @@
   // Returns true if the cookie should be included for the given request |url|.
   // HTTP only cookies can be filter by using appropriate cookie |options|.
   // PLEASE NOTE that this method does not check whether a cookie is expired or
   // not!
   bool IncludeForRequestURL(const GURL& url,
                             const CookieOptions& options) const;
 
   std::string DebugString() const;
 
   static std::string CanonPath(const GURL& url, const ParsedCookie& pc);
+
+  // Returns a "null" time if expiration was unspecified or invalid.
   static base::Time CanonExpiration(const ParsedCookie& pc,
                                     const base::Time& current,
                                     const base::Time& server_time);
 
   // Cookie ordering methods.
 
   // Returns true if the cookie is less than |other|, considering only name,
   // domain and path. In particular, two equivalent cookies (see IsEquivalent())
   // are identical for PartialCompare().
   bool PartialCompare(const CanonicalCookie& other) const;
@@ skipping 60 matching lines @@
   bool httponly_;
   CookieSameSite same_site_;
   CookiePriority priority_;
 };
 
 typedef std::vector<CanonicalCookie> CookieList;
 
 }  // namespace net
 
 #endif  // NET_COOKIES_CANONICAL_COOKIE_H_