Catch unhandled ValueError from future timestamp

CHANGES.rst

@@ -3,6 +3,8 @@ Version 2.1.1
 
 Unreleased
 
+-   Handle date overflow in timed unsign. :pr:`296`
+
 
 Version 2.1.0
 -------------

src/itsdangerous/timed.py

@@ -38,7 +38,8 @@ def get_timestamp(self) -> int:
 
     def timestamp_to_datetime(self, ts: int) -> datetime:
         """Convert the timestamp from :meth:`get_timestamp` into an
-        aware :class`datetime.datetime` in UTC.
+        aware :class`datetime.datetime` in UTC. Raises :exc:`.ValueError`
+        if the timestamp is too far in the past or future for Python.
 
         .. versionchanged:: 2.0
             The timestamp is returned as a timezone-aware ``datetime``
@@ -124,7 +125,12 @@ def unsign(
         # split the value and the timestamp.
         if sig_error is not None:
             if ts_int is not None:
-                ts_dt = self.timestamp_to_datetime(ts_int)
+                try:
+                    ts_dt = self.timestamp_to_datetime(ts_int)
+                except ValueError as exc:
+                    raise BadTimeSignature(
+                        "Malformed timestamp", payload=value
+                    ) from exc
 
             raise BadTimeSignature(str(sig_error), payload=value, date_signed=ts_dt)
 

tests/test_itsdangerous/test_timed.py

@@ -1,3 +1,4 @@
+import sys
 from datetime import datetime
 from datetime import timedelta
 from datetime import timezone
@@ -66,6 +67,18 @@ def test_malformed_timestamp(self, signer):
         assert "Malformed" in str(exc_info.value)
         assert exc_info.value.date_signed is None
 
+    @pytest.mark.skipif(
+        sys.platform == "win32", reason="Freezegun Invalid argument occurs on Windows"
+    )
+    def test_malformed_future_timestamp(self, signer):
+        signed = b"value.TgPVoaGhoQ.AGBfQ6G6cr07byTRt0zAdPljHOY"
+
+        with pytest.raises(BadTimeSignature) as exc_info:
+            signer.unsign(signed)
+
+        assert "Malformed" in str(exc_info.value)
+        assert exc_info.value.date_signed is None
+
     def test_future_age(self, signer):
         signed = signer.sign("value")