761241 - Friendly flag is not maintained if there are >3 slots in a PKCS#11 module

Status: RESOLVED WONTFIX

(NSS :: Libraries, defect, P5)

Description

[hallinan]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.52 Safari/536.5

Steps to reproduce:

1. Imported a PKCS#11 module via modutil with the friendly flag set.
2. Verified that C_GetSlotList returns 5 slots.
3. Attempted to view certificates via Options->Encryption->View Certificates


Actual results:

I am prompted for a pin for the last two tokens that were reported.


Expected results:

I should not have been prompted for any pin.

I have partially debugged the issue. It appears that mod->slotInfoCount in secmod_LoadPKCS11Module(pk11load.c) is equal to 3 when mod is passed into SECMOD_SetRootCerts(pk11load.c). This causes the lookup of the slotID to fail in that function, and a new default(not friendly) PK11PreSlotInfo to be created.

Prior to this it appears slotInfoCount was set in SECMOD_CreateModule(pk11pars.c) slotParams which were  "{0x00000001=[slotFlags=PublicCerts ] 0x00000002=[slotFlags=PublicCerts ] 0x00000003=[slotFlags=PublicCerts ] }  " This information appears to be available prior to loading or making any calls to the module.