The SetCookieHeaderValue.TryParse method was throwing ArgumentOutOfRangeException when the Max-Age value exceeded TimeSpan's maximum representable seconds (922337203685), violating the expected behavior of TryParse methods which should return false for invalid input rather than throwing exceptions.

Problem

// This would throw ArgumentOutOfRangeException instead of returning false
bool result = SetCookieHeaderValue.TryParse("name=value; max-age=922337203686", out var cookie);

The issue occurred because TimeSpan.FromSeconds(maxAge) throws when maxAge exceeds the valid range, but the calling code didn't validate the input before the conversion.

Solution

Added overflow validation in GetSetCookieLength before calling TimeSpan.FromSeconds:

// Check if maxAge would cause TimeSpan.FromSeconds to overflow
const long MaxTimeSpanSeconds = 922337203685L;
const long MinTimeSpanSeconds = -922337203685L;
if (maxAge > MaxTimeSpanSeconds || maxAge < MinTimeSpanSeconds)
{
    // MaxAge value would overflow TimeSpan, abort
    return 0;
}

Now overflow cases return false as expected:

// These now correctly return false instead of throwing
bool result1 = SetCookieHeaderValue.TryParse("name=value; max-age=922337203686", out var cookie1);   // false
bool result2 = SetCookieHeaderValue.TryParse("name=value; max-age=-922337203686", out var cookie2);  // false

// Valid edge cases still work
bool result3 = SetCookieHeaderValue.TryParse("name=value; max-age=922337203685", out var cookie3);   // true

Added comprehensive tests covering both overflow cases (which should fail parsing) and valid edge cases (which should succeed).

Fixes #61735.

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.