298891 - Crash when storing self-signed multi-cn certificate

Status: RESOLVED DUPLICATE of bug 298906

(Firefox :: Security, defect)

Description

[Mathias Hasselmann]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050517 Epiphany/1.6.3
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050517 Firefox/1.0.4

When I access https://taschenorakel.de/ and try to permanently accept the site's
multi-cn certificate, Firefox crashes.

Reproducible: Always

Steps to Reproduce:
1. Visit https://taschenorakel.de/
2. Select "Accept this certificate permanently"
3. Click "OK"

Actual Results:  
Firefox crashes.

Expected Results:  
Remember the certificate and render the page.

#0  0xb53c62ff in NSC_ModuleDBFunc ()
   from /usr/lib/MozillaFirefox/libsoftokn3.so
#1  0xb537c735 in FC_GetFunctionList ()
   from /usr/lib/MozillaFirefox/libsoftokn3.so
#2  0xb537c88a in FC_GetFunctionList ()
   from /usr/lib/MozillaFirefox/libsoftokn3.so
#3  0xb5389566 in FC_GetFunctionList ()
   from /usr/lib/MozillaFirefox/libsoftokn3.so
#4  0xb538b4a2 in FC_GetFunctionList ()
   from /usr/lib/MozillaFirefox/libsoftokn3.so
#5  0xb538e2b9 in NSC_ModuleDBFunc ()
   from /usr/lib/MozillaFirefox/libsoftokn3.so
#6  0xb543d6d4 in nss_DumpCertificateCacheInfo ()
   from /usr/lib/MozillaFirefox/libnss3.so
#7  0xb543e065 in nss_DumpCertificateCacheInfo ()
   from /usr/lib/MozillaFirefox/libnss3.so
#8  0xb5423c0c in __CERT_AddTempCertToPerm ()
   from /usr/lib/MozillaFirefox/libnss3.so
#9  0xb5310e4a in ?? () from /usr/lib/MozillaFirefox/components/libpipnss.so
#10 0x0867d458 in ?? ()
#11 0x0866de28 in ?? ()
#12 0xb72807d4 in ?? ()
#13 0xb531aa23 in NSGetModule ()
   from /usr/lib/MozillaFirefox/components/libpipnss.so
#14 0xb5310fb6 in ?? () from /usr/lib/MozillaFirefox/components/libpipnss.so
#15 0x0867d458 in ?? ()
#16 0x00000002 in ?? ()
#17 0x087d3d80 in ?? ()
#18 0xb7280872 in ?? ()
#19 0xb728083c in ?? ()
#20 0x0867d458 in ?? ()
#21 0xb728083c in ?? ()
#22 0xb541ca8e in CERT_DupCertificate ()
   from /usr/lib/MozillaFirefox/libnss3.so
#23 0xb53121fa in ?? () from /usr/lib/MozillaFirefox/components/libpipnss.so
#24 0x085fe898 in ?? ()
#25 0x0876afb0 in ?? ()
#26 0xffffe014 in ?? ()
#27 0x087d3d80 in ?? ()
#28 0xb7e88480 in ?? () from /usr/lib/MozillaFirefox/libnspr4.so
#29 0x0867d458 in ?? ()
#30 0xffffffff in ?? ()
#31 0xb72808b4 in ?? ()
#32 0x00000001 in ?? ()
#33 0xb7e88480 in ?? () from /usr/lib/MozillaFirefox/libnspr4.so
#34 0xb72808cc in ?? ()
#35 0xb7e6f249 in PR_GetError () from /usr/lib/MozillaFirefox/libnspr4.so
#36 0xb535dcc6 in SSL_GetStatistics () from /usr/lib/MozillaFirefox/libssl3.so
#37 0xb535ea1f in SSL_GetStatistics () from /usr/lib/MozillaFirefox/libssl3.so
#38 0xb535eeb2 in SSL_GetStatistics () from /usr/lib/MozillaFirefox/libssl3.so
#39 0xb535f219 in SSL_GetStatistics () from /usr/lib/MozillaFirefox/libssl3.so
#40 0xb535ff3b in SSL_GetStatistics () from /usr/lib/MozillaFirefox/libssl3.so
#41 0xb53619e1 in SSL_AuthCertificate ()
   from /usr/lib/MozillaFirefox/libssl3.so
#42 0xb5365fbf in SSL_RevealURL () from /usr/lib/MozillaFirefox/libssl3.so
#43 0xb53672c8 in SSL_ConfigSecureServer ()
   from /usr/lib/MozillaFirefox/libssl3.so
#44 0xb5367383 in SSL_ConfigSecureServer ()
   from /usr/lib/MozillaFirefox/libssl3.so
#45 0xb536b19d in SSL_ImportFD () from /usr/lib/MozillaFirefox/libssl3.so
#46 0xb5310c25 in ?? () from /usr/lib/MozillaFirefox/components/libpipnss.so
#47 0x0876afb0 in ?? ()
#48 0x08844820 in ?? ()
#49 0x0000018c in ?? ()
#50 0xb7e7ca19 in PR_OpenDir () from /usr/lib/MozillaFirefox/libnspr4.so
#51 0xb7e638cf in PR_Write () from /usr/lib/MozillaFirefox/libnspr4.so
#52 0xb72ad701 in NSGetModule ()
   from /usr/lib/MozillaFirefox/components/libnecko.so
#53 0xb7303a78 in NSGetModule ()
   from /usr/lib/MozillaFirefox/components/libnecko.so
#54 0xb730e96b in NSGetModule ()
   from /usr/lib/MozillaFirefox/components/libnecko.so
#55 0xb7efcbba in non-virtual thunk to nsStringInputStream::QueryInterface(nsID
const&, void**) () from /usr/lib/MozillaFirefox/libxpcom.so
#56 0x088444c8 in ?? ()
#57 0x08844710 in ?? ()
#58 0x08844820 in ?? ()
#59 0x00000000 in ?? ()
#60 0x0000018c in ?? ()
#61 0xb7280d7c in ?? ()
#62 0xb7280cec in ?? ()
#63 0xb7e0e883 in pthread_getspecific () from /lib/libpthread.so.0
#64 0xb730e9f8 in NSGetModule ()
   from /usr/lib/MozillaFirefox/components/libnecko.so
#65 0xb7303ca1 in NSGetModule ()
   from /usr/lib/MozillaFirefox/components/libnecko.so
#66 0xb7304698 in NSGetModule ()
   from /usr/lib/MozillaFirefox/components/libnecko.so
#67 0xb72ad464 in NSGetModule ()
   from /usr/lib/MozillaFirefox/components/libnecko.so
#68 0xb72afe8b in NSGetModule ()
   from /usr/lib/MozillaFirefox/components/libnecko.so
#69 0xb72b1eca in NSGetModule ()
   from /usr/lib/MozillaFirefox/components/libnecko.so
#70 0xb7f146cb in nsThread::Main () from /usr/lib/MozillaFirefox/libxpcom.so
#71 0xb7e7e059 in PR_Select () from /usr/lib/MozillaFirefox/libnspr4.so
#72 0xb7e0b18e in pthread_start_thread () from /lib/libpthread.so.0
#73 0xb7e0b332 in pthread_start_thread_event () from /lib/libpthread.so.0
#74 0xb77cf11a in clone () from /lib/libc.so.6

Comment 1

[Mathias Hasselmann]

As this also happens with Epiphany linked against Firefox, there also is a
similiar bug report at gnome.org: http://bugzilla.gnome.org/show_bug.cgi?id=309123

Comment 2

[Christian Persch (GNOME) (away; not receiving bug mail)]

Sorry, I searched for dups but didn't find this one. Resolving dup of the later
one, because it has a much better trace from a debug build.

*** This bug has been marked as a duplicate of 298906 ***