293319 - NSS calls PKCS11 module function with invalid handles

Status: RESOLVED FIXED

(NSS :: Libraries, defect, P3)

Description

[Nelson Bolyard (seldom reads bugmail)]

This bug is intended to be a tracking bug for all the other NSS bugs about
cases where NSS (PK11wrap) calls a PKCS11 module (either NSS's own or 
some other one) with an invalid handle.  

There are two broad classes of these bugs:
A) NSS calls a PKCS11 module with a zero handle, which is always invalid
by definition

B) NSS calls a PKCS11 module with a non-zero handle that is invalid because
the session or object was recently freed.  

Any bugs (fixed or open) that describe problems in those categories should
be marked as blocking this bug (This bug will depend on those).  Presently
that includes this list: 196353,200704,257604,283642,283690,292049

If bugzilla doesn't automatically notify the submittors or CC list members 
of those bugs, then perhaps those people should become cc list members 
of this bug.  

Several bugs of this nature have been fixed in the last year, and I am 
working on another one now (bug 292049).

Comment 1

[Nelson Bolyard (seldom reads bugmail)]

All the blockers of this tracker bug were fixed in NSS 3.12.2.