630890 - crash occurs if cert8.db file is corrupt when using function CERT_FindUserCertsByUsage in NSS

Status: RESOLVED WONTFIX

(NSS :: Libraries, defect)

Description

[teyang]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.6 NET_mmhpset ( .NET CLR 3.5.30729)
Build Identifier: Crash in CERT_FindUserCertsByUsage using corrupt cert8.db file

Our application crashes when calling CERT_FindUserCertsByUsage and the root cause seems to be a corrupt cert8.db file in the Firefox profile directory. If the cert8.db file is deleted then relaunching the application does not result in the crash anymore. Reports from users seem to indicate that the corruption might have occur during a Firefox update.

Firefox also seems to crash with a corrupt cert8.db file when trying to access the certificate management tool under preferences(Firefox->preferences->Advanced->Encryption->View Certificates)

Below is part of a stack trace from a crash:

0 libnssdbm3.dylib 0x017613ff legacy_SetCryptFunctions + 17111
1 libnssdbm3.dylib 0x0175ffc3 legacy_SetCryptFunctions + 11931
2 libnssdbm3.dylib 0x017602d7 legacy_SetCryptFunctions + 12719
3 libnssdbm3.dylib 0x0175c036 0x1751000 + 45110
4 libsoftokn3.dylib 0x0171b57b C_GetFunctionList + 69340
5 libsoftokn3.dylib 0x01707d4f NSC_ModuleDBFunc + 2710
6 libsoftokn3.dylib 0x0170b53d C_GetFunctionList + 3742
7 libnss3.dylib 0x0064c8bf nss_DumpCertificateCacheInfo + 9229
8 libnss3.dylib 0x006464ae CERT_EncodeInfoAccessExtension + 12038
9 libnss3.dylib 0x00608ce8 CERT_GetCertNicknames + 144
10 libnss3.dylib 0x00609834 CERT_FindUserCertsByUsage + 33
.................0x001442c8 CNSSCertificate::GetStoreType() + 3432



Reproducible: Always

Steps to Reproduce:
1.Place the attached cert8.db file into a Firefox profile
2.Open up Firefox and access the certificate management tool
3.Firefox will crash
Actual Results:  
Application trying to access user certificates will crash

Expected Results:  
NSS should not be crashing if the certificate database file is corrupted and instead should report such users back or handle it nicely somehow

Comment 1

[teyang]

Attachment: corrupt cert8.db file cauing crash

Placing this cert8.db file into the Firefox profile directory will cause a crash when trying to access user certificate in code

Comment 2

[Wan-Teh Chang]

Bob, could you take a look at this crash?

Comment 3

[Nelson Bolyard (seldom reads bugmail)]

Sounds like the reporter has an application that is attempting to "share" 
Firefox's cert8.db file.  Of course, that is not supported for cert8, and 
is KNOWN to cause corruption of cert8.  That's why we developed cert9.
It's shareable.  

I'll run NSS 3.11's cert DB analyzer on this file ... sometime in the next 
week ... I hope.

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

The bug assignee didn't login in Bugzilla in the last months and this bug has severity 'critical'.
:beurdouche, could you have a look please?
For more information, please visit auto_nag documentation.

Comment 5

[Robert Relyea]

what do you mean I haven't logged in in the last months? I haven't really ever logged out. I also haven't looked at this bug in years though... hmm.

Comment 6

[Robert Relyea]

We can probably close it 'won't fix' since it's a dbm bug, and corrupted databases and crashes are the the reason we dropped dbm.

Comment 7

[Suhaib Mujahid [:suhaib]]

(In reply to Robert Relyea from comment #5)

what do you mean I haven't logged in in the last months? I haven't really ever logged out.

Sorry, there was a problem with the detection of inactive users.