115699 - NSS3.4 build. Sending signed email crashes browser.

Status: VERIFIED FIXED

(Core Graveyard :: Security: UI, defect, P1)

Description

[John Unruh]

1.) Use a trunk 6.2 build to select signing and encrypting certs, and select to 
sign messages, encrypt if possible. Close the app.
2.) Start the mozilla NSS4.3 build, using the same profile you just used to set 
the email preferences in 6.2
3.) Send an email.
What happens: Crash.

Comment 1

[Stephane Saux]

cc kai.
NSS3.4

Comment 2

[Stephane Saux]

cc relyea

Comment 3

[Kai Engert [:KaiE:]]

The crash is caused by an assertion in certhigh.c - CERT_FindUserCertsByUsage,
called with "oneCertPerName" enabled. The section "remove any extra certs" is
reached. The outer loop iterates over certList, assuming that for each
node->cert->nickname, there is an entry in the nnptr array which a matching
nickname.

Entries in nnptr have a qualified nickname, i.e. they are "tokenname:nickname".
But node->cert->nickname is just a nickname without token name.

No match is found, and the assertion PORT_Assert(0) is triggered.

Comment 4

[Stephane Saux]

kai.

Comment 5

[Robert Relyea]

This crash should be fixed on the tip of NSS 3.4. 

Comment 6

[Kai Engert [:KaiE:]]

I am now able to send signed messages.
Marking fixed.

Comment 7

[John Unruh]

Verified.