1284489 - Various scan-build errors in ssl3con

Status: RESOLVED FIXED

(NSS :: Libraries, defect)

Comment 1

[Franziskus Kiefer [:franziskus]]

Attachment: scan-build-fixes.patch

Comment 2

[Tim Taubert [:ttaubert] (inactive)]

Comment on attachment 8767989 [details] [diff] [review]
scan-build-fixes.patch

Review of attachment 8767989 [details] [diff] [review]:
-----------------------------------------------------------------

::: lib/ssl/ssl3con.c
@@ +1529,5 @@
>          pBuf += dh_p.len - dh_Ys.len;
>      }
>      /* If we're padding Y, dh_Ys can't be longer than dh_p. */
>      PORT_Assert(!padY || dh_p.len >= dh_Ys.len);
> +    PORT_Assert(dh_Ys.data);

Should move this up to where the other asserts are.

@@ +10569,5 @@
>                                                   hashes->u.pointer_to_hash_input.len,
>                                                   sigAndHash.hashAlg,
>                                                   &localHashes);
> +        } else {
> +            rv = SECFailure;

This shouldn't compile with NO_PKCS11_BYPASS=1. Maybe just wrap the whole thing in if (hashes->u.pointer_to_hash_input.data)?

Comment 3

[Franziskus Kiefer [:franziskus]]

https://hg.mozilla.org/projects/nss/rev/8a9b64b9917e