99061 - Crash on this secure page

Status: RESOLVED DUPLICATE of bug 99052

(NSS :: Libraries, defect)

Description

[brentmh]

I am seeing this crash on both the trunk and the 0.9.4 branch.  This must be a
regression since it didn't occur with 0.9.3

Comment 1

[Oliver Klee]

Reporter, could you post a talkback ID and your build ID?

Please read the bug reporting guidelines at
http://www.mozilla.org/quality/bug-writing-guidelines.html and consider using
Bugzilla Helper at http://www.mozilla.org/quality/help/bugzilla-helper.html to
report bugs. Thanks for using Mozilla!

Comment 2

[brentmh]

Sorry, here is some more information:

The bug only occurs for me in Linux.  Today's windows 0.9.4 branch builds seem
to work fine.  The page has an "invalid" certificate, so the windows build pops
up a dialog informing me of this fact and asking if I still want to accept it.  
This is the correct behaviour.

On Linux the crash bug appears to be 100% reproducible.  No matter I go to the
page (type id URL, or enter bookmark) it crashes.  It does not popup any sort of
dialog.  For the 0.9.4 branch I used buildID 2001091005 from mozilla.org and for
the trunk I used a my own build with buildID 2001091003.

Comment 3

[Markus Gerstel]

wfm 2001091001 linux

Comment 4

[brentmh]

OK, I tried deleting my .mozilla directory and now it works for me as well. 
After a bit more poking I narrowed it down to the file cert7.db.  I had visited
this site with an earlier version of mozilla and asked it to remember the
certificate.  

Did the structure of this file change?  Is mozilla perhaps just not gracefully
handling the old format?

Comment 5

[jay garcia]

WFM Win98SE build 2001091003
WFM Linux 2001091001

Comment 6

[jay garcia]

Sorry, should have been marked WFM

Comment 7

[Markus Gerstel]

.

Comment 8

[Markus Gerstel]

Marking wfm per reporters comment

Comment 9

[Jonas Linde]

This bug should probably be reopened:

It only crashes in subsequent browser sessions; you have to click "Remember this
certificate permanently" when prompted to approve it, then quit mozilla, start a
new browser and go back to the same site; only then will it crash.

Removing the cert makes it not crash again until after you choose to remember
the cert again. Mozilla.rv:0.9.3+.2001090521 works but none later. Currently I'm
using mozilla.rv:0.9.4+.2001091021 on Debian Linux and I've seen this on the
above URL as well as on other sites with invalid/self-signed certificates. 

Comment 10

[Markus Gerstel]

OK - Confirmed with 2001091101 linux :
/cvs/mozilla/mozilla/dist/bin/run-mozilla.sh: line 72: 13817 Segmentation fault
     $prog ${1+"$@"}

Comment 11

[Markus Gerstel]

Attachment: GDB Backtrace

Comment 12

[Markus Gerstel]

-> NSS / Libraries

Comment 13

[Wan-Teh Chang]

Nelson, could you please take a look at the stack trace
and see if we can avoid this crash (for example, when a
NULL 'cert' argument is passed to CERT_GetCertChainFromCert)?

Comment 14

[Nelson Bolyard (seldom reads bugmail)]

The fix for this bug has already been reviewed and should be checked in 
shortly.  See bug 99052

*** This bug has been marked as a duplicate of 99052 ***