268974 - PKCS11 handling -- token slot name strings empty

Status: NEW

(Core :: Security, defect)

Description

[Doug Turner (:dougt)]

If your slot name or token name has any "garbage" chars returned to Mozilla,
Mozilla will render your name as an empty string.

For example, PCS11 asks that your slotDescription be space padded out to 64
bytes.  If you only padded 32 bytes, and left the remaining empty, Mozilla will
treat your slotDescription as the empty string. ""

The reason behind this is that these names are converted from UTF8 to Unicode. 
In many critical places, if this conversation fails the string will be null.

Comment 1

[Doug Turner (:dougt)]

mass reassigning to nobody.