128074 - Crash if I import PKCS#12 certificates

Status: VERIFIED WORKSFORME

(Core Graveyard :: Security: UI, defect, P1)

Description

[Tristan Faujour]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.8) Gecko/20020204
BuildID:    2002020415

Mozilla crashes when I import a PKCS#12 certificate (.p12 file), and the
certificate is not imported. I used certicates that were generated by IDX-PKI
(http://idx-pki.idealx.org) with an empty password.

Reproducible: Always

Steps to Reproduce:
1. Find a .p12 file
2. Open Edit/Preferences/Privacy & Security/Certificates/Manage
Certificates/Your Certificates
3. Click on "Restore"
4. Select the .p12 file
5. Enter the requested passwords

Actual Results:  Mozilla dies horribly.

Expected Results:  The certificate should be imported.

Crash IDs: TB3425578W, TB3425528G, TB3425296Q, TB3425193M, TB3422786Y

I can send you a .p12 file if you want.

I actually managed to import these certificates: I imported them into IE 5.50,
exported them in the .pfx format, tried to import these .pfx files in Mozilla
(failure because of an "unknown error"), and finally imported them in the .p12
format (and that worked!).
I used this method twice, and it worked twice.

Comment 1

[Matthias Versen [:Matti]]

-> PSM and CC Stephend for the talkback

Comment 2

[[e-mail] (gone - use [e-mail] instead)]

SEC_PKCS7ContentType()
SEC_PKCS7ContentIsSigned()
sec_pkcs7_verify_signature()
SEC_PKCS7VerifySignature()
SEC_PKCS12DecoderVerify()
nsPKCS12Blob::ImportFromFile()
nsNSSCertificateDB::ImportPKCS12File()
XPTC_InvokeByIndex()
XPCWrappedNative::CallMethod()
XPC_WN_CallMethod()
js_Invoke()
js_Interpret()
js_Invoke()
js_InternalInvoke()
JS_CallFunctionValue()
nsJSContext::CallEventHandler()
nsJSEventListener::HandleEvent()
nsEventListenerManager::HandleEventSubType()
nsEventListenerManager::HandleEvent()
nsXULElement::HandleDOMEvent()
PresShell::HandleDOMEventWithTarget()
nsButtonBoxFrame::MouseClicked()
nsButtonBoxFrame::HandleEvent()
PresShell::HandleEventInternal()
PresShell::HandleEventWithTarget()
nsEventStateManager::CheckForAndDispatchClick()
nsEventStateManager::PostHandleEvent()
PresShell::HandleEventInternal()
PresShell::HandleEvent()
nsView::HandleEvent()
nsViewManager::DispatchEvent()
HandleEvent()
nsWidget::DispatchEvent()
nsWidget::DispatchWindowEvent()
nsWidget::DispatchMouseEvent()
nsWidget::OnButtonReleaseSignal()
nsWindow::HandleGDKEvent()
dispatch_superwin_event()
handle_gdk_event()
libgdk-1.2.so.0 + 0x17e4f (0x40356e4f)
libglib-1.2.so.0 + 0x117f3 (0x403897f3)
libglib-1.2.so.0 + 0x11dd9 (0x40389dd9)
libglib-1.2.so.0 + 0x11f8c (0x40389f8c)
libgtk-1.2.so.0 + 0x94803 (0x4029e803)
nsAppShell::Run()
nsAppShellService::Run()
main1()
main()
libc.so.6 + 0x1c177 (0x404d4177) 

Comment 3

[Stephane Saux]

This works for me on build id 2002022503 
Is this still a talkback crash?

Comment 4

[John Unruh]

Verified works for me. 

Comment 5

[[e-mail]]

I can confirm this bug.
I wanted to import the root certificate of CaCert.org
(pem or der format) and end in a crash every time.