Closed Bug 310197 Opened 19 years ago Closed 11 months ago

slot->password flag not protected.

Categories

(NSS :: Libraries, defect, P5)

Product:
NSS
Component:
Libraries
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED INACTIVE

People

(Reporter: rrelyea, Assigned: rrelyea)

Details

(Whiteboard: FIPS)

Softoken does nto protect the slot->password entry from modifications of other threads. This is a long standing problem we have gotten away with because applications don't typically login and logout of the token while lots of operations are going on. We need a fix for this problem that does not unduly interfere with concurrency. bob
I noticed this problem when I worked on the FIPS password guessing probability bugs.
QA Contact: jason.m.reid → libraries
OS: Windows XP → All
Hardware: PC → All
Blocks: FIPS2008
Whiteboard: FIPS
removed from FIPS2009. will consider for future release.
No longer blocks: FIPS2008
Severity: normal → S3
Severity: S3 → S4
Status: NEW → RESOLVED
Closed: 11 months ago
Priority: -- → P5
Resolution: --- → INACTIVE
You need to log in before you can comment on or make changes to this bug.