489180 - crash when using smart card and pin2 code is asked in internet bank

Status: RESOLVED INVALID

(NSS :: Libraries, defect)

Description

[andkal]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.0; et; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8 (.NET CLR 3.5.30729)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.0; et; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8 (.NET CLR 3.5.30729)

after inserting smart card (estonian ID card) pin2 code (for digital signature) in internet bank (www.swedbank.ee) and pressing ok button error window pops up. Title bar: "Microsoft Visual C++ Runtime Library". Message: "Assertion failed! Program: E:\programmid\Mozilla firefox\firefox.exe
File: card.c
Line: 319
Expression: card->lock_count>=1
Ror information...(and so on)

If I press abort or retry firefox shuts down, if I press ignore two times then goes to next window put on every link same message pops up again and I have to press ignore two times again.
Browser or OS restart doesn't help.

Reproducible: Always

Comment 1

[timeless]

http://www.opensc-project.org/pipermail/opensc-commits/2003-December/002162.html

that assert isn't in our library. t appears to be in opensc or a derivative. please open:

tools>options>advanced>encryption>security devices

I have:
NSS Internal PKCS #11 Module
Builtin Roots Module

For each module you have which isn't the two i've listed above, please select them and copy the Module name and

Comment 2

[timeless]

Path.... then use windows explorer to select those libraries and get properties, please get at least the vendor and version records and provide them as well, thanks.

lastly, please file a bug against your vendor providing this bug's url to them and then provide their reference id in this bug.

Thanks, and sorry.

You can provide https://developer.mozilla.org/en/docs/How_to_get_a_stacktrace_with_WinDbg as an aid for your PKCS11 module vendor

Comment 3

[Nelson Bolyard (seldom reads bugmail)]

andkal,
Assertions are things that programmers put into their software to detect 
mistakes made by their own software.  When these assertions detect the
mistake that they they are intended to detect, they report an 
"Assertion failure" and they force a crash.  

In your report above (comment 0), you document an assertion failure in 
some software that is not part of Mozilla software, is is very likely
an assertion is the software provided with your Estonian ID card. 
Consequently, it must be reported to the maker (or distributor) of that 
software, and not to Mozilla.  

The Mozilla people will be glad to discuss this matter with the providers
of the Estonian card, and those discussions could take place right here in
this bug, or in Mozilla's dev-tech-crypto mailing list.  

But since this assertion failure is not in one of Mozilla's assertions, 
but rather is a third party's software, this bug will be marked invalid.
That doesn't mean that your problem isn't real, but only that it's not a 
problem in Mozilla's software.  This bug can continue to be used for 
discussion with the Estonian ID developers, even while it is marked invalid.

Timeless, thanks for your help with this bug's triage.

Comment 4

[Wayne Mery (:wsmwk)]

per comment 3