478994 - Allow Softoken's fork check to be disabled

Status: RESOLVED FIXED

(NSS :: Libraries, defect, P1)

Description

[Nelson Bolyard (seldom reads bugmail)]

Attachment: patch v1 - untested

The fork checking that we introduced to Softken in NSS 3.12.3 has 
caused some old programs that dependend on the old behavior to stop 
working.  The developers of those programs desire that they be able to 
continue to operate as they have done for years.  They desire a way to 
disable Softoken's new fork checks.

The attached patch offers one proposed method for doing this. It adds 
another reserved string for the environment variable NSS_STRICT_NOFORK.
When C_Initialize detects that it is set to "DISABLED", C_Initialize 
will disable the fork checks.  

Before I ask for formal review of this patch, I'd like to know if it 
causes anyone great angst.

Comment 1

[Wan-Teh Chang]

I never understood why we wanted to add the fork check
to the softoken, so I have no comments for this bug.

Comment 2

[Robert Relyea]

Comment on attachment 362835 [details] [diff] [review]
patch v1 - untested

r+

rrelyea (once it's tested).

Comment 3

[Nelson Bolyard (seldom reads bugmail)]

Christophe, 
Please prepare a test build with this patch and prepare to test DS5 with
that version of NSS and the environment variable 
NSS_STRICT_NOFORK=DISABLED

Comment 4

[Christophe Ravel]

Nelson,

There is a typo in your patch at line 362  	

        if ( doForkCheck && !strcmp(doForkCheck, "DISBLED") ) { \

"DISBLED" should be "DISABLED"

Comment 5

[Nelson Bolyard (seldom reads bugmail)]

I fixed the spelling of DISABLED and committed the patch.
Checking in pkcs11.c;   new revision: 1.161; previous revision: 1.160
Checking in softoken.h; new revision: 1.23; previous revision: 1.22