Closed Bug 166893 Opened 22 years ago Closed 22 years ago

Cert value is corrupted in Token Cache after import.

Categories

(NSS :: Libraries, defect)

3.4.2
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: rrelyea, Assigned: rrelyea)

Details

Attachments

(1 file)

When importing a certificate through PK11_ImportDERCert(), the derValue was passed in from the application and not copied. The PK11_ImportCert() call might then store the related certificate in a smart card cache. Later when we look at the cert, the derCert value will appear corrupted because the application has long since freed the derCert value. Fix: copy the der into the cert's arena
Attached patch Copy the DerDataSplinter Review
NOTE: This patch is against the 3.4.2 branch, a similar by different patch is also needed for the tip.
Comment on attachment 97967 [details] [diff] [review] Copy the DerData r=wtc. Please go ahead and check in this patch on the NSS_3_4_BRANCH and also check it in on the NSS_3_5_BRANCH and the tip as appropriate.
Attachment #97967 - Flags: review+
Version: 3.4.2 → 3.6
Target Milestone: --- → 3.6
Version: 3.6 → 3.4.2
Fix checked into NSS 3.4 branch and the tip.
Status: NEW → RESOLVED
Closed: 22 years ago
Resolution: --- → FIXED
Target Milestone: 3.6 → 3.4.3
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: