568168 - Reproducable crash in NSS libpkix https:// image @PKIX_PL_Object_DecRef @PR_AtomicDecrement @pkix_PolicyChecker_MakeMutableCopy

Status: VERIFIED DUPLICATE of bug 550929

(NSS :: Libraries, defect)

Description

[Kai Engert [:KaiE:]]

I have frequently crashed on this problem during the last months, with different sites.

Environment:
- Linux Fedora 12 or 13
- Firefox 3.6.3
- NSS 3.12.6
- NSS softoken 3.11.4
- Kai's profile / NSS database
- NSS_DEFAULT_DB_TYPE="sql"
- NSS_ENABLE_PKIX_VERIFY="1"
- NSS *.db files are symbolic links to files shared with Thunderbird

How I can trigger the crash with my profile:
- start Firefox
- go to https://images-na.ssl-images-amazon.com/images/G/03/x-locale/cs/ya/images/shipment_large_lt._V203615268_.gif

crash

Comment 1

[Kai Engert [:KaiE:]]

Attachment: Crash stack

Comment 2

[Kai Engert [:KaiE:]]

Using different Firefox profiles and NSS database I confirmed the following:

The crash is specific to my primary work NSS database, the one that I've been using for several years, the one I'm sharing with Thunderbird.

The crash does not depend on other Firefox profile settings.

cert9.db is 1192 KB
key4.db  is 524  KB

Comment 3

[Kai Engert [:KaiE:]]

Crash occurs only when using NSS_ENABLE_PKIX_VERIFY="1" and my large NSS database.

No crash using simpler NSS databases.

Comment 4

[Kai Engert [:KaiE:]]

I found a fix and then saw it's already in NSS trunk...