504402 - pkix_pl_OcspResponse_Create will crash with nbioContext if httpClient->version != 1

Status: NEW

(NSS :: Libraries, defect, P3)

Description

[timeless]

I'm aware that this probably doesn't make sense today, but you're scaring the poor static analysis tools.

Comment 1

[Nelson Bolyard (seldom reads bugmail)]

Changing subject.  Was: 
pkix_pl_OcspResponse_Create will crash touching hcv1 if httpClient->version != 1

This crash only occurs in the case where nbioContext is non-NULL.  
Today, it is always NULL.  The code for the nbioContext paths is known to 
be buggy, but is effectively dead code at present, because NSS does not yet 
make any use of non-NULL nbioContexts anywhere.  

So, unless it can be shown that this problem also occurs in a path where 
nbioContext is NULL, this is a low priority bug.  If we had an umbrella bug
for all the nbioContext issues, this bug would block it.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

The bug assignee is inactive on Bugzilla, so the assignee is being reset.