624493 - PR_Assert: Assertion failure: srclen > 0 decoding base64 buffer

Status: RESOLVED DUPLICATE of bug 346583

(NSS :: Libraries, defect)

Description

[Bob Clary [:bc] (inactive)]

Attachment: testcase

Evaluate the following expression in a debug build of Firefox (3.5, 3.6, or 4.0)

window.content.crypto.importUserCertificates(undefined, null, 0, undefined);

Assertion failure: srclen > 0, at nssb64d.c:565
Abort trap

http://mxr.mozilla.org/mozilla-central/source/security/nss/lib/util/nssb64d.c#565

565     PR_ASSERT(srclen > 0);
566     if (srclen == 0)
567         return dest;

This doesn't really look like an security issue as the case appears to be handled, but making security sensitive just in case and also since it was 
found using Michal Zalewski's cross_fuzz tool.