39493 - Uninitialized variable read

Status: VERIFIED DUPLICATE of bug 39489

(NSS :: Libraries, defect, P3)

Description

[Fred Roeber]

This is a replacement bug for Netscape bug
http://scopus/bugsplat/show_bug.cgi?id=312151

[W] UMR: Uninitialized memory read in CERT_DecodeDERCertificate {8 occurrences}
    Reading 4 bytes from 0x0004f6f0 (4 bytes at 0x0004f6f0 uninitialized)
    Address 0x0004f6f0 points into a fiber's stack 
    Address 0x0004f6f0 is 28 bytes past the start of local variable 'entry' in 
certcallback
    Thread ID: 0x3c7
    Error location
        CERT_DecodeDERCertificate [certdb.c:518]
                        PORT_Memcpy(data, derSignedCert->data, 
derSignedCert->len);
                    } else {
                        /* point to passed in DER data */
             =>         cert->derCert = *derSignedCert;
                    }
                
                    /* decode the certificate info */
        certcallback   [pcertdb.c:4476]
        SEC_TraverseDBEntries [pcertdb.c:4427]
        SEC_TraversePermCerts [pcertdb.c:4513]
        pk11_importKeyDB [pkcs11.c:3261]
        NSC_FindObjectsInit [pkcs11.c:3544]
        pk11_FindObjectByTemplate [pk11cert.c:100]
        PK11_MatchItem [pk11cert.c:160]
        PK11_FindPrivateKeyFromCert [pk11cert.c:1204]
        prot_ssl_init  [prot_ssl.c:279]
        imap_main      [imapd.c:445]
        service_start  [service_win32.c:116]
        main           [imapd.c:473]
        mainCRTStartup [crtexe.c:338]

Comment 1

[Wan-Teh Chang]

We should look at this bug in 3.1 or 3.2.

Comment 2

[Nelson Bolyard (seldom reads bugmail)]

This bug is a duplicate of bug 39489, which has already 
been fixed.  

*** This bug has been marked as a duplicate of 39489 ***

Comment 3

[Scott Brodmerkle]

Verified dupe.