3986 Commits

Author SHA1 Message Date
alexei.volkov.bugs%sun.com
8896a565f3 337013: OOM crash [@ nssArena_Destroy - nssTrustDomain_TraverseCertificatesBySubject][@ nssArena_Destroy - nssTrustDomain_TraverseCertificatesByNickname] Dereferencing possibly NULL "tmpArena". r=nelson, sr=julien
git-svn-id: svn://10.0.0.236/trunk@208821 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-30 17:57:20 +00:00
glen.beasley%sun.com
b633117140 349965 added ECDSA key gen to power up self test r=wtc
git-svn-id: svn://10.0.0.236/trunk@208709 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-29 16:57:18 +00:00
nelson%bolyard.com
22c6440a01 Correctly zero-fill columns in weaved array. r=julien,wtchang. Bug 348359.
git-svn-id: svn://10.0.0.236/trunk@208688 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-29 02:46:20 +00:00
wtchang%redhat.com
7f16637e0a Bugzilla Bug 349632: made C_Verify work for multi-part mechanisms.
r=glen.beasley,relyea.


git-svn-id: svn://10.0.0.236/trunk@208487 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-26 01:49:48 +00:00
alexei.volkov.bugs%sun.com
5713865408 330056: seckey_put_private_key leaks memory. r=nelson, sr=wtc
git-svn-id: svn://10.0.0.236/trunk@208478 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-25 23:04:56 +00:00
alexei.volkov.bugs%sun.com
d950fbfb9c 304361: smime: possible memory corruption when encoding/decoding smime_encryptionkeypref_template. r=nelson, sr=wtc
git-svn-id: svn://10.0.0.236/trunk@208470 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-25 22:26:18 +00:00
wtchang%redhat.com
82cc75d438 Bugzilla bug 336813: do not set the nonstandard flag CKF_THREAD_SAFE. Set
CKF_DUAL_CRYPTO_OPERATIONS and the new v2.10 flag CKF_TOKEN_INITIALIZED.
r=relyea.


git-svn-id: svn://10.0.0.236/trunk@208362 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-24 22:52:21 +00:00
nelson%bolyard.com
5bc47a3fed re-enable SSLTRACE for keys and (pre)master secrets. Bug 349966. r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@208358 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-24 22:10:03 +00:00
julien.pierre.bugs%sun.com
240d7965b8 Back out Slavo's patch for bug 332222 in ssl.sh because tinderbox fails.
git-svn-id: svn://10.0.0.236/trunk@208322 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-24 19:48:08 +00:00
julien.pierre.bugs%sun.com
36c1797540 Allow ssl.sh to support mixed ECC/RSA certs. Patch created by Slavomir Katuscak. r=nelson, rrelyea
git-svn-id: svn://10.0.0.236/trunk@208306 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-24 17:48:52 +00:00
julien.pierre.bugs%sun.com
17896bcb9b Fix for bug 332222 . Allow ssl.sh to support mixed ECC/RSA certs. Patch created by Slavomir Katuscak. r=nelson, rrelyea
git-svn-id: svn://10.0.0.236/trunk@208256 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-23 23:32:01 +00:00
julien.pierre.bugs%sun.com
b5ffbeb496 Fix for bug 349920 . Don't optimize freebl libraries in debug build on Sparc . r=nelson, neil.williams
git-svn-id: svn://10.0.0.236/trunk@208254 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-23 22:57:26 +00:00
glen.beasley%sun.com
d877dec7ab 349632 C_VerifyUpdate HMAC fix r=wtc,sr=bobR
git-svn-id: svn://10.0.0.236/trunk@208246 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-23 21:46:23 +00:00
julien.pierre.bugs%sun.com
600a141f4c Fix for bug 225525 . Resolve race assigning NSSCertificate fields which leaked memory and slot reference. r=nelson
git-svn-id: svn://10.0.0.236/trunk@208124 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-22 22:54:11 +00:00
nelson%bolyard.com
7aa683b767 Fix race in CERT_NewTempCertificate. Bug 341323. r=julien,rrelyea
git-svn-id: svn://10.0.0.236/trunk@208087 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-22 03:30:14 +00:00
wtchang%redhat.com
4d8af14fe3 Bugzilla Bug 342476: backed out the previous checkin. Not sure if it's a
good idea.


git-svn-id: svn://10.0.0.236/trunk@207893 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-18 23:28:10 +00:00
wtchang%redhat.com
694e83662f Backed out the unnecessary change in the previous checkin.
git-svn-id: svn://10.0.0.236/trunk@207886 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-18 22:56:18 +00:00
wtchang%redhat.com
34808440e4 Bugzilla Bug 342476: NSS should set and check the pReserved field in the
(extended) CK_C_INITIALIZE_ARGS structure.  r=nelsonb,relyea.
Modified files: pk11wrap/pk11load.c softoken/pkcs11.c


git-svn-id: svn://10.0.0.236/trunk@207885 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-18 22:48:41 +00:00
wtchang%redhat.com
8bf92cd8a2 Bugzilla Bug 349011: marked local functions as static. The patch is
contributed by timeless <timeless@bemail.org>. r=wtc.
Modified files: crmfcont.c crmfpop.c crmfreq.c


git-svn-id: svn://10.0.0.236/trunk@207880 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-18 22:21:34 +00:00
wtchang%redhat.com
58f5aca997 Bugzilla Bug 53427: Added PORT_ArenaZRelease and change secasn1d.c to zero
our_pool before releasing or freeing it. r=nelsonb,jpierre.
Modified files: secasn1d.c secport.c secport.h


git-svn-id: svn://10.0.0.236/trunk@207510 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-15 23:56:01 +00:00
wtchang%redhat.com
a0998099c1 Bugzilla Bug 53427: passed the correct 'zero' argument to PORT_FreeArena.
Removed dead code. r=nelsonb,relyea.
Modified Files:
	softoken/keydb.c softoken/lowpbe.c softoken/pkcs11c.c
	util/secdig.c


git-svn-id: svn://10.0.0.236/trunk@207406 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-15 01:34:38 +00:00
wtchang%redhat.com
de69a1296b Bugzilla Bug 336813: Improved NSC_GetTokenInfo and FC_GetTokenInfo. Always
set CKF_RNG. Set the utcTime member to 16 zeros "0000000000000000".
Factored out the common flag CKF_RNG and CKF_THREAD_SAFE. r=nelsonb,relyea.
Modified files: fipstokn.c pkcs11.c


git-svn-id: svn://10.0.0.236/trunk@207330 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-14 17:52:31 +00:00
wtchang%redhat.com
9caa55b430 Bugzilla Bug 347409: removed the on-demand initiation of the FIPS power-up
self-tests from FC_Login. We now require the user to shut down and restart
the softoken to initiate the power-up tests on demand. r=nelsonb.


git-svn-id: svn://10.0.0.236/trunk@207321 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-14 17:05:31 +00:00
wtchang%redhat.com
2a4003f6cc Bugzilla Bug 53427: PORT_FreeArena should zero memory before freeing it if
the 'zero' argument is true. r=nelsonb.


git-svn-id: svn://10.0.0.236/trunk@207318 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-14 16:56:39 +00:00
julien.pierre.bugs%sun.com
1e0735f5b0 Fix for bug 178894 . Unbreak build.
git-svn-id: svn://10.0.0.236/trunk@206750 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-07 20:48:04 +00:00
kaie%kuix.de
bb1a2e592b Bug 346551, init SECItem derTemp in crmf_encode_popoprivkey
r=wtchang


git-svn-id: svn://10.0.0.236/trunk@206745 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-07 20:02:59 +00:00
julien.pierre.bugs%sun.com
a48ba8324d Fix for bug 178894 . Quick decoder updates for lib/certdb and lib/certhigh . r=nelson .
git-svn-id: svn://10.0.0.236/trunk@206742 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-07 19:09:41 +00:00
julien.pierre.bugs%sun.com
3d5bc5fab1 Fix for bug 177184 . NSS_CMSDecoder_Cancel might have a leak . And this patch might fix it, or not. But this bug needs to be put to rest.
git-svn-id: svn://10.0.0.236/trunk@206632 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-05 01:19:23 +00:00
wtchang%redhat.com
c3319980a8 Bugzilla Bug 347024: Moved the software integrity test from
nsc_CommonInitialize to the new function sftk_fipsSoftwareIntegrityTest
and have sftk_fipsPowerUpSelfTest call sftk_fipsSoftwareIntegrityTest.
Updated the audit logging code.  Removed an extraneous comma between two
string literals in fipstokn.c. r=relyea,nelsonb.
Modified files: fipstest.c fipstokn.c pkcs11.c


git-svn-id: svn://10.0.0.236/trunk@206520 18797224-902f-48f8-a5cc-f745e15eee43
2006-08-03 21:50:51 +00:00
wtchang%redhat.com
1e048e0321 Bugzilla Bug 336509: put the FIPS token in the Error state only when the
continuous RNG test fails.


git-svn-id: svn://10.0.0.236/trunk@206178 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-31 18:31:07 +00:00
wtchang%redhat.com
305f77214d Bugzilla Bug 336509: check for continuous RNG test failure after direct and
indirect uses of the RNG. r=relyea,nelsonb.
Modified files: fipstokn.c keydb.c pkcs11.c pkcs11c.c pkcs11i.h rsawrapr.c
                softoken.h


git-svn-id: svn://10.0.0.236/trunk@206166 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-31 18:10:17 +00:00
wtchang%redhat.com
3f56585bc9 Bugzilla bug 336509: Made prng_GenerateGlobalRandomBytes static because
it's only used in this file. r=neil.williams.


git-svn-id: svn://10.0.0.236/trunk@205108 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-29 00:28:12 +00:00
wtchang%redhat.com
9372a674a6 Bugzilla Bug 345502: C89 doesn't allow initializing a local array. Fixed
some array sizes.  The patch is contributed by Glen Beasley of Sun. r=wtc.


git-svn-id: svn://10.0.0.236/trunk@205082 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-28 20:45:01 +00:00
wtchang%redhat.com
6f4cbeded7 Bugzilla Bug 345941: fixed another bug that we might pass uninitialized
'req' to fclose(). Thanks to Wolfgang Rosenauer <mozilla@rosenauer.org> for
reporting the bug and reviewing the patch.


git-svn-id: svn://10.0.0.236/trunk@205078 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-28 20:19:02 +00:00
wtchang%redhat.com
f42d8691f1 Bugzilla Bug 345941: fixed the bug that we might pass uninitialized 'req'
to fclose(). r=glen.beasley.  Thanks to Wolfgang Rosenauer
<mozilla@rosenauer.org> for the bug report.


git-svn-id: svn://10.0.0.236/trunk@204934 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-27 16:56:56 +00:00
wtchang%redhat.com
0bd41b0a25 Bugzilla Bug 345775: use SECITEM_FreeItem(..., PR_TRUE) to completely free
the SECItem allocated in getECParams. r=alexei.volkov.


git-svn-id: svn://10.0.0.236/trunk@203789 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-27 00:33:23 +00:00
wtchang%redhat.com
3e706ee0fa Bugzilla Bug 345779: removed two useless assignments and fixed an error in
the comment. r=douglas.stebila.


git-svn-id: svn://10.0.0.236/trunk@203784 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-26 23:17:46 +00:00
glen.beasley%sun.com
5a018dd081 345502 RNG power up selftest r=wtc
git-svn-id: svn://10.0.0.236/trunk@203488 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-24 03:54:09 +00:00
nelson%bolyard.com
3c8ae7422c Correct ifdefs so that non-ECC builds will continue to build correctly.
r=wtchang  bug 341707.


git-svn-id: svn://10.0.0.236/trunk@203201 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-20 00:17:23 +00:00
nelson%bolyard.com
505b7efaff Curve-limited clients must not negotiate ECC ciphersuites unless they send the supported curve extension. This means that when they are nogotiating SSL 3.0
and not TLS, they should not negotiate ECC ciphersuites at all.
Bug 341707.  r=rrelyea.


git-svn-id: svn://10.0.0.236/trunk@203068 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-19 01:42:58 +00:00
nelson%bolyard.com
637b0c77db Workaround bogus assertion failure in MSVC 8 (Express, 2005) RTL by switching
from the old _findfirst, _findnext file enumeration API to the newer
FindFirstFile, FindNextFile API.  Might be slower, but won't crash if it finds
files older than 1970.  Bug 331404. r=julien.pierre


git-svn-id: svn://10.0.0.236/trunk@203067 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-19 01:33:41 +00:00
nelson%bolyard.com
50c4d8b146 Coverity bug 340217. Fix leak, crash, and failure to set error codes in
CMMF_POPODecKeyChallContDecryptChallenge. r=alexei.volkov


git-svn-id: svn://10.0.0.236/trunk@203058 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-19 00:45:31 +00:00
nelson%bolyard.com
b2d5ca7bed Remove FORTEZZA code from this file. Coverity CID 874. r=rrelyea.
git-svn-id: svn://10.0.0.236/trunk@203055 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-19 00:36:38 +00:00
nelson%bolyard.com
80ba0291f4 Remove dead function SECU_GetPBEPassword from nss/cmd/lib/secutil.*
Patch contributed by Jon Smirl <jonsmirl@gmail.com>
Coverity CID 516. Bug 337081.  r=nelson@bolyard.com


git-svn-id: svn://10.0.0.236/trunk@203050 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-19 00:25:03 +00:00
douglas%stebila.ca
422d3e64c6 Bugzilla Bug 338367: Turn GF2M_POPULATE and GFP_POPULATE macros into functions. r+=wtchang
git-svn-id: svn://10.0.0.236/trunk@203049 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-19 00:14:31 +00:00
nelson%bolyard.com
abac1b36c0 Stop using EXTENSION_NOT_FOUND error in OCSP code. r=julien. bug 287850.
git-svn-id: svn://10.0.0.236/trunk@203048 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-19 00:08:52 +00:00
wtchang%redhat.com
84d10d5420 Bugzilla bug 295291: regenerated using the new certdata.perl script.
git-svn-id: svn://10.0.0.236/trunk@203043 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-18 23:38:14 +00:00
alexei.volkov.bugs%sun.com
5761fab072 334459: Variable "(cache)->sharedCache" tracked as NULL was passed to a function that dereferences it. [@ CloseCache - InitCache]. r=nelson
git-svn-id: svn://10.0.0.236/trunk@202258 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-17 22:15:10 +00:00
alexei.volkov.bugs%sun.com
b1e4bcb35a 341291: Coverity 689 - potential NULL ptr crash in ssl3_SendCertificate. r=nelson
git-svn-id: svn://10.0.0.236/trunk@202256 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-17 22:08:03 +00:00
alexei.volkov.bugs%sun.com
cceb6694e2 341120: Coverity 541 nss_cms_recipients_traverse leaks "rle". r=nelson
git-svn-id: svn://10.0.0.236/trunk@202255 18797224-902f-48f8-a5cc-f745e15eee43
2006-07-17 21:57:35 +00:00