136747 - Crash when trying to backup a cert / creating p12 file

Status: VERIFIED INVALID

(Core Graveyard :: Security: UI, defect)

Description

[Kai Engert [:KaiE:]]

I was using a build that has the patch from bug 128586.
Not sure if that is important.

I obtained a new certificate from Thawte.

Then I tried to backup the cert to a p12 file.

After I have type the passwords, I crash.

With that cert database I do now crash, regardless whether my build has the
patch from bug 128586 or not.

This is the crash location, I can provide a full stack trace if necessary.

#0  0x43761bfa in sec_asn1e_contents_length (theTemplate=0x43780700,
src=0x8b38b34, ignoresubstream=0, noheaderp=0xbfffc568) at secasn1e.c:641
	tmpt = (SEC_ASN1Template *) 0x437806c0
	sub_src = (void *) 0x2
	sub_len = 1131943888
	group = (void **) 0xdadadada
	encode_kind = 160
	underlying_kind = 8209
	explicit = 0
	optional = 1
	universal = 0
	may_stream = 0
	len = 0

Comment 1

[Kai Engert [:KaiE:]]

Some more info: I now think this patch is a problem of the patch in 128586.

First, I tested with an older version of Mozilla, and I was successfully able to
backup the p12. (After I was also able to import that new p12 file into a fresh
profile, using a build of Mozilla, which has the patch from bug 128586.)

I did some more testing, and see that I'm now unable to export/backup any of my
certs.

However, if I remove the patch from 128586, using the same cert
database/profile, backing up works.

Comment 2

[Robert Relyea]

Kai, are you sure you've done a full rebuild? The size of a low level key data
structure changed and could cause the symptoms you are seeing. I'm able to
import and export certs with the patch in my tree.

bob

Comment 3

[Kai Engert [:KaiE:]]

Bingo, sorry, I always forget that, I really need to burn that into my mind.

After clobbering NSS, backing up works.

Thanks!

Comment 4

[John Unruh]

Verified invalid per kaie's comment.