534964 - Attached secmod.db hangs electrolysis on startup

Status: RESOLVED INVALID

Description

[Cork]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.3a1pre) Gecko/20091215 Minefield/3.7a1pre
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.3a1pre) Gecko/20091215 Minefield/3.7a1pre

With the attached secmod.db in a clean profile, central hangs on start. If you have any sessionrestore, it will hang without any window.

Reproducible: Always

Steps to Reproduce:
1. Create a new firefox profile
2. Place the attached secmod.db in the new profile
3. Start electrolysis with the new profile
4. When/If the window comes up, try to interact with it
Actual Results:  
The window never comes up or is frozen.

Expected Results:  
Firefox should load the same was as without it.

Works in a732c6d3c078
Broken in 683dfdc4adf0

I think nexus (plugin for swedish bank id https://install.bankid.com/installbankidcom/) might be the cause of it, not sure.

Comment 1

[Cork]

Created attachment 417759 [details]
secmod.db file that hangs firefox

Comment 2

[Kai Engert (:kaie:)]

Mass change owner of unconfirmed "Core:Security UI/PSM/SMime" bugs to nobody.
Search for kaie-20100607-unconfirmed-nobody

Comment 3

[Kai Engert (:kaie:)]

File secmod.db is managed by the NSS libraries.

What happens if you use prefs/advanced/security/devices and unload the external pkcs#11 module libP11.so? Could that library be the culprit?

Dump of the strings contained in the attached secmod.db file:

Personal PKCS11
!/usr/local/lib/personal/libP11.so
Personal PKCS11
Root Certs
9/home/mattias/.mozilla/firefox/XXXXXXXXX/libnssckbi.so
Root Certs
NSS Internal PKCS #11 Module
mconfigdir='/home/mattias/.mozilla/firefox/XXXXXXXXX' certPrefix='' keyPrefix='' secmod='secmod.db' flags=optimizeSpace updatedir='' updateCertPrefix='' updateKeyPrefix='' updateid='' updateTokenDescription='' manufacturerID='Mozilla.org' libraryDescription='PSM Internal Crypto Services' cryptoTokenDescription='Generic Crypto Services' dbTokenDescription='Software Security Device' cryptoSlotDescription='PSM Internal Cryptographic Services' dbSlotDescription='PSM Private Keys' FIPSSlotDescription='Software Security Device (FIPS)' FIPSTokenDescription='FIPS 140 Cryptographic, Key and Certificate Services' minPS=0
NSS Internal PKCS #11 Module

Comment 4

[Nelson Bolyard (seldom reads bugmail)]

Yeah, we're going to presume the fault is in libP11.so until it can be 
shown that, with that removed, the problem persists.

Comment 5

[Cork]

Sorry for the delay, haven't had a chance to look further into this.

Yes its caused by the bankid personal plugin (http://test.bankid.com), not sure if you have to have a chip reader or not; but its the cause. As soon as I've used it with firefox, secmode.db dead locks firefox on start (this happens in 3.6.6 too).

So i guess this bug is invalid, or evang. at best. I'll try to contact the developers.

Comment 6

[Nelson Bolyard (seldom reads bugmail)]

Suggest you collect a log file of the activity with that PKCS#11 module.
See http://www.mozilla.org/projects/security/pki/nss/tech-notes/tn2.html
for clues.  Be sure you collect a log file for the bankid module and not
for Firefox's modules.