Commit Graph

6059 Commits

Author SHA1 Message Date
richm%stanfordalumni.org
712bbe1d7a remove patch file copying 2006-06-22 19:42:14 +00:00
richm%stanfordalumni.org
ccab8658af bump version to 4.0.2; now using HEAD of mozilla/security/coreconf which has fixed the coreconf location patch, so get rid of patch file 2006-06-22 19:38:24 +00:00
kaie%kuix.de
2e3ac1bfad Bug 337797, Can't send signed email as the first crypto operation in FIPS mode
r=rrelyea
2006-06-22 18:54:15 +00:00
kaie%kuix.de
d473bb318e Land missing portion of bug 235773, Conform to NSS upstream build options, r=wtchang 2006-06-22 18:47:44 +00:00
gavin%gavinsharp.com
411156ceba Bug 213207: make security mismatch dialog default to "Cancel", and fix other dialogs to use the dialog binding's standard default button attribute, r=kaie, ui-r=beltzner 2006-06-22 05:05:28 +00:00
wtchang%redhat.com
f25d1d70cd Bugzilla Bug 338798: in C89, local struct variables can only be initialized
by constant expressions.  HP C compiler version B.11.11.08 generates
incorrect code silently if the initializers are non-constant expressions.
r=alexei.volkov,julien.pierre.
2006-06-21 00:40:59 +00:00
neil.williams%sun.com
628ba95143 Bug 337613, FipsTest assertion failure
r=glen
2006-06-20 21:40:16 +00:00
wtchang%redhat.com
034af09812 Bugzilla Bug 337034: nested two related tests. r=relyea. 2006-06-17 00:09:59 +00:00
julien.pierre.bugs%sun.com
543d49b730 Workaround (or fix) for bug 341573 . Switch compiler option from -fsimple=2 to -fsimple=1 2006-06-16 04:41:34 +00:00
alexei.volkov.bugs%sun.com
3e699dc0f0 [Bug 337110] OOM Crash and memory leak [@ PK11_CreatePBEParams]. r=julien, sr=nelson 2006-06-16 00:42:46 +00:00
wtchang%redhat.com
d3ad378479 Bugzilla Bug 341590: in FIPS mode, softoken should report the more serious
fatalError condition before the !isLoggedIn condition. r=nelson.
2006-06-15 23:55:59 +00:00
christophe.ravel.bugs%sun.com
7d92147b35 Bugzilla 337793: Create a test to check all EC curves
r+ Christophe
Committed on behalf of Nelson.
2006-06-15 19:26:01 +00:00
alexei.volkov.bugs%sun.com
d5aa4d29c5 [Bug 337008] OOM crash [@ nssList_Add - STAN_InitTokenForSlotInfo - STAN_LoadDefaultNSS3TrustDomain][@ nssList_Clone - nssList_CreateIterator - STAN_LoadDefaultNSS3TrustDomain] Dereferencing possibly NULL "(td)->tokenList". r=nelson, sr=wtc 2006-06-13 21:36:29 +00:00
wtchang%redhat.com
82930ed07a Bugzilla Bug 341111: added a dummy reference to the SCCS and RCS version
strings so that they won't be optimized away. r=nelsonb.
2006-06-13 17:48:03 +00:00
alexei.volkov.bugs%sun.com
51b89f627d [Bug 337110] OOM Crash [@ PK11_CreatePBEParams]. r=nelson 2006-06-13 17:33:06 +00:00
mhammond%skippinet.com.au
0f241835df Land DOM_AGNOSTIC3_BRANCH, bug 255942. r=a few people, sr=brendan. 2006-06-13 03:07:47 +00:00
alexei.volkov.bugs%sun.com
4fe5c22675 [Bug 337099] Crash [@ PK11_ParamFromIV] Variable "iv" tracked as NULL
was dereferenced. r=nelson
2006-06-12 21:16:49 +00:00
alexei.volkov.bugs%sun.com
cc3d04b60e [Bug 339886] param leaked at NSS_CMSCipherContext_StartEncrypt(nss/lib/smime/cmscipher.c). r=nelson 2006-06-12 21:05:12 +00:00
nelson%bolyard.com
7d6b311cd3 Don't call nssCKFWToken_Destroy with NULL. Bug 340018. r=alexei.volkov 2006-06-10 22:21:10 +00:00
nelson%bolyard.com
4f4902f94e Fix leak and OOM crash. Bug 338352 and 338356. Coverity.
r=rrelyea, alexei.volkov
2006-06-10 22:13:46 +00:00
julien.pierre.bugs%sun.com
e9a0aa7867 Fix for bug 340917 - crlutil should init NSS read-only for list option. r=alexei.volkov 2006-06-09 21:55:11 +00:00
kaie%kuix.de
969191a00e Bug 340183, Add the Netlock Class QA root certificate
Approval for adding CA cert granted by Frank Hecker in bug 313942
Patch by Wan-Teh Chang, r=me
2006-06-09 21:02:16 +00:00
nelson%bolyard.com
5337c5aee0 Fix broken build. 2006-06-09 18:12:50 +00:00
nelson%bolyard.com
bae0b415d1 Fix leaks in CERT_DistNamesFromNicknames (bug 339916) and in
CERT_GetCertNicknames (bug 339919). Coverity bugs. r=alexei.volkov
2006-06-09 01:24:39 +00:00
julien.pierre.bugs%sun.com
29a3a59542 Fix for bug 340909 . Add batch command to usage. r=nelson 2006-06-09 01:24:23 +00:00
nelson%bolyard.com
5498c37db3 Fix leak in NSS_CMSEncoder_Start error path. Bug 339914. r=alexei.volkov 2006-06-08 22:01:02 +00:00
nelson%bolyard.com
4c913b0390 Fix leak in sec_asn1d_add_to_subitems. Bug 339913. r=alexei.volkov 2006-06-08 21:40:31 +00:00
glen.beasley%sun.com
acfa788133 340734 update ref to 140-1 to 140 r=neilWilliams 2006-06-08 18:19:09 +00:00
steffen.wilberg%web.de
f8583a4596 Bug 309052: remove broken Help button from CRL manager in Firefox. r=mconnor, kaie 2006-06-07 22:48:23 +00:00
nelson%bolyard.com
5b368c8808 Remove dead code. Coverity 506. r=nelson,wtchang. Bug 337027.
Patch by Jon Smirl <jonsmirl@yahoo.com>
2006-06-07 18:36:26 +00:00
nelson%bolyard.com
995213d2df Fix bug 337104 and bug 337105. Don't crash if we run out of memory
in ssl2_ConstructCipherSpecs().  r=Alexei.Volkov  Coverity 442 & 443.
2006-06-07 17:53:19 +00:00
julien.pierre.bugs%sun.com
172c1bdf45 Fix for bug 326637 . Unnecessary request of PKCS11 device password. r=rrelyea 2006-06-07 02:30:27 +00:00
Jan.Varga%gmail.com
e5158d88ef Fix for bug 296040. Cell-based selection in trees
r=Neil Deakin, sr=Neil Rashbrook, sponsored by BEToptions
2006-06-06 20:05:13 +00:00
julien.pierre.bugs%sun.com
e602259ec8 Fix for bug 340040 - add certutil option to verify an OCSP responder cert. r=nelson 2006-06-06 01:06:23 +00:00
timeless%mozdev.org
a768026fc9 Bug 337917 Make consumers stop using cids from other modules
r=smontagu sr=darin
2006-06-03 23:35:59 +00:00
alexei.volkov.bugs%sun.com
e70d27d7ba [Bug 339908] 3 NULL ptr crashes when PK11_GetBestSlot returns NULL. r=nelson 2006-06-02 20:34:04 +00:00
wtchang%redhat.com
0037b873be Import NSPR 4.6.2 and NSS 3.11.1. 2006-06-02 05:20:37 +00:00
wtchang%redhat.com
41c9c343c1 Import NSPR 4.6.2. 2006-06-02 05:18:01 +00:00
wtchang%redhat.com
cdd64c7beb Bugzilla bug 338599: added new function SECKEY_SignatureLen and use it
instead of SECKEY_PublicKeyStrength to get ECDSA signature lengths.
Removed the 'type' member from the VFYContextStr structure because that
info is in the 'key->keyType' field.  Set error codes when functions
fail (return 0). r=nelsonb.
Modified Files:
	cryptohi/keyhi.h cryptohi/seckey.c cryptohi/secvfy.c
	nss/nss.def ssl/ssl3con.c
2006-05-31 23:54:52 +00:00
alexei.volkov.bugs%sun.com
72df55c274 [Bug 220380] Add SSL client auth stress tests.
Attachment "auth patch"(#222740). r=nelson
2006-05-31 18:06:02 +00:00
wtchang%redhat.com
a07f869b7a Bugzilla Bug 338552: added StartCom CA certificate to NSS. The patch is
contributed by  Eddy Nigg, StartCom Ltd. <eddy_nigg@startcom.org>. r=wtc.
a=hecker.
Modified Files: certdata.c certdata.txt nssckbi.h
2006-05-31 17:18:54 +00:00
julien.pierre.bugs%sun.com
ba7825ee28 Fix for bug 336477 . Fix for CERT_UncacheCRL error checking. r=nelson 2006-05-31 01:57:55 +00:00
richm%stanfordalumni.org
7832d52b10 fixes from Nathan to fix the rpm build script 2006-05-24 13:40:09 +00:00
glen.beasley%sun.com
28fdef2190 335619 Template Fix for optional elements by rocky-s r=nkwan 2006-05-24 03:18:17 +00:00
glen.beasley%sun.com
bbe5f84528 338484 Run SSL tests in FIPS mode 2006-05-24 03:09:42 +00:00
alexei.volkov.bugs%sun.com
47817668ff [Bug 337014] OOM crash [@ PORT_ArenaAlloc - PK11_PQG_ParamGenSeedLen][@ PORT_ArenaAlloc - PK11_PQG_ParamGenSeedLen] Dereferencing possibly NULL "varena". r=nelson 2006-05-22 23:08:04 +00:00
alexei.volkov.bugs%sun.com
3aa52be061 [Bug 337495] Double free in CRMF_CertReqMsgSetSignaturePOP (security/nss/lib/crmf/crmfpop.c) [Attachment 222949]. r=nelson 2006-05-22 22:38:56 +00:00
wtchang%redhat.com
3533f0c590 Bugzilla Bug 320336: improved the comments for SECITEM_AllocItem in
secitem.h.  Made SECITEM_AllocItem fail (return NULL) if the allocation of
the buffer fails, as documented. r=nelsonb.
Modified files: secitem.c secitem.h
2006-05-22 22:24:34 +00:00
wtchang%redhat.com
68708d13f4 Bugzilla Bug 298520: moved the RSA maximum size macros from rsa.c to
blapit.h.  Removed an out-of-date comment from blapit.h. r=nelsonb.
Modified files: blapit.h rsa.c
2006-05-22 22:10:40 +00:00
wtchang%redhat.com
06496e21ff Bugzilla Bug 298520: added a comment explain the meaning of the MAX_KEY_LEN
macro. r=nelsonb.
2006-05-22 22:08:40 +00:00
alexei.volkov.bugs%sun.com
7cd142bd9c [Bug 337495] Double free in CRMF_CertReqMsgSetSignaturePOP (security/nss/lib/crmf/crmfpop.c). r=nelson 2006-05-22 21:46:14 +00:00
bugzilla%arlen.demon.co.uk
1e689b1d34 Bug 235773 TLS ECC cipher suites: PSM backend, SeaMonkey UI
Removal of files and entries in jar.mn
r=kengert
2006-05-22 14:33:09 +00:00
wtchang%redhat.com
a0ac292413 Bug 236613: change to MPL/LGPL/GPL tri-license. 2006-05-21 21:02:26 +00:00
alexei.volkov.bugs%sun.com
538a18fde0 [Bug 220380] Add SSL client auth stress tests. Attachment #4. r=julien 2006-05-20 18:32:08 +00:00
kaie%kuix.de
7d10a011c3 bug 338421, Can no longer create SSL session to Cisco VPN concentrator by host name
Patch contributed by Bill Gianopoulos
r=kengert/nelson
2006-05-20 02:36:48 +00:00
nelson%bolyard.com
43d0a92ac7 Promote the use of curve secp192r1 for client auth, since it is faster
than most.  Bug 332350.  r=rrelyea.
2006-05-19 03:59:06 +00:00
nelson%bolyard.com
505671ed77 Eliminate a crash and plug a leak in the error path for function
nssSMIMEProfile_Create. Coverity bug 337101. r=alexei.volkov.
2006-05-18 23:29:19 +00:00
nelson%bolyard.com
1eb10c802e Avoid crash if "item" pointer is NULL. Coverity bug 333555.
r=wtchang,alexei.volkov
2006-05-18 21:20:04 +00:00
alexei.volkov.bugs%sun.com
e05b17bc20 [Bug 337008] OOM crash [@ nssList_Add - STAN_InitTokenForSlotInfo - STAN_LoadDefaultNSS3TrustDomain][@ nssList_Clone - nssList_CreateIterator - STAN_LoadDefaultNSS3TrustDomain] Dereferencing possibly NULL "(td)->tokenList". r=nelson, sr=wtc 2006-05-18 21:00:58 +00:00
alexei.volkov.bugs%sun.com
b0a8ac4918 [Bug 337010] OOM crash [@ NSC_DigestKey] Dereferencing possibly NULL "att". r=ne
lson,wtc
2006-05-18 20:52:50 +00:00
nelson%bolyard.com
08e023d910 Plug leak. Free cache. Coverity bug 338201. r=alexei.volkov 2006-05-18 20:46:19 +00:00
nelson%bolyard.com
5c56ef5776 Fix several Coverity bugs. Bug 336982. NULL ptr check after ptr deref'ed.
Bug 337080.  Dead code.  r=alexei.volkov
2006-05-18 20:39:19 +00:00
nelson%bolyard.com
88c4f3a0b3 Remove dead old FORTEZZA KEA code. Coverity bug 337098. r=rrelyea,wtchang 2006-05-18 20:24:23 +00:00
alexei.volkov.bugs%sun.com
538630b067 [Bug 337154] Coverity 321, dead code in mozilla/security/nss/lib/pk11wrap/pk11cert.c. (second patch) r=nelson 2006-05-18 20:21:12 +00:00
nelson%bolyard.com
a1423c99e4 Don't dereference a NULL secmodprefix argument. Coverity Bug 336981.
r=alexei.volkov
2006-05-18 19:44:24 +00:00
nelson%bolyard.com
780c599d61 In SEC_PKCS12DecoderGetCerts, don't dereference p12dcx until AFTER it has
been checked for NULL. Coverity bug 336971. r=alexei.volkov
2006-05-18 19:38:59 +00:00
nelson%bolyard.com
0a6525e406 Add 3 assertions to satisfy coverity that tmpt is never NULL in these
places.  Bug 336995. r=akexei.volkov,wtchang
2006-05-18 19:32:44 +00:00
nelson%bolyard.com
68f51af5fe Plug leak. Free "info" in error path. Coverity bug 336475.
r=wtchang,alexei.volkov
2006-05-18 04:35:32 +00:00
nelson%bolyard.com
9dc19d4fe0 Correct the amount returned by ssl_Writev for short writes on non-blocking
sockets.  Bug 338325. patch by Chris Newman <chris.newman@sun.com>
r=nelson
2006-05-18 01:10:21 +00:00
wtchang%redhat.com
5e3f18a4c6 Bugzilla bug 338367: check that the array index params->name is within
bounds before taking an element from the ecCurve_map array.
r=doublas.stebila.
2006-05-17 23:58:18 +00:00
julien.pierre.bugs%sun.com
6f65f3a2dd Fix for bug 222300. r=nelson,wtchang 2006-05-17 22:20:08 +00:00
alexei.volkov.bugs%sun.com
e58e3e05ba [Bug 337011] OOM crash [@ sftk_handleKeyObject][@ sftk_handleKeyParameterObject] Dereferencing possibly NULL "attribute". r=nelson 2006-05-17 20:52:16 +00:00
alexei.volkov.bugs%sun.com
5713a8afaf [Bug 337326] Leak in nsslowcert_UpdateSubjectEmailAddr (security/nss/lib/softoken/pcertdb.c). r=nelson 2006-05-17 20:46:47 +00:00
alexei.volkov.bugs%sun.com
e1b759198c [Bug 337009] OOM crash [@ nssList_Count - nssTrustDomain_GetCertsFromCache] Dereferencing possibly NULL "certList". r=nelson 2006-05-17 20:38:59 +00:00
alexei.volkov.bugs%sun.com
ef6e49c6b2 [Bug 337332] Leak in OpenNewDB (security/nss/lib/softoken/keydb.c). r=nelson 2006-05-17 17:56:32 +00:00
wtchang%redhat.com
ff6ba2c143 Bugzilla Bug 337887: use the -mnop-fun-dllimport flag so that we can use
a pointer to a function declared with the dllimport attribute as a constant
address.  We need to use such function pointers to initialize a const
structure in nss/lib/ssl/sslsock.c.  The patch is contributed by Chris
Seawood <cls@seawood.org>.  r=wtc.
2006-05-17 16:37:59 +00:00
alexei.volkov.bugs%sun.com
4fe8d81c2b [Bug 336485] coverity thinks that nssPKIObject_GetInstances could return null which would lead to a crash [@ listCertsCallback]. r=nelson 2006-05-16 23:47:43 +00:00
julien.pierre.bugs%sun.com
b0d4b44133 Fix for bug 335036. certutil tries to shutdown NSS even if it didn't initialize . r=wtchang, nelson 2006-05-16 02:16:25 +00:00
wtchang%redhat.com
844f45261e Bugzilla Bug 337025: removed more unused or trivially used variables.
r=alexei.volkov,nelson.bolyard.
2006-05-16 01:57:04 +00:00
wtchang%redhat.com
942eb77419 Bug 305835: Remove NSS_ENABLE_ECC ifdefs in libssl. r=wtc,nelsonb 2006-05-16 01:14:43 +00:00
kaie%kuix.de
c27c12ee7e But 235773, Seamonkey only, removes UI to edit and show cipher info
r=rrelyea, ui-review=neil
2006-05-16 01:09:37 +00:00
wtchang%redhat.com
49a4fc689f Bugzilla Bug 298506: a first cut at Solaris auditing. The patch is
contributed by Glen Beasley of Sun. r=wtc.
Modified Files:
	cmd/platlibs.mk lib/softoken/config.mk lib/softoken/fipstokn.c
2006-05-16 01:04:05 +00:00
kaie%kuix.de
99c1cc7b57 bug 235773, Patch v13
This check in will make PSM aware of ECC cipher suites. Nightly builds will not yet contain ECC, because NSS is still
being compiled with ECC disabled.
r=rrelyea/darin
2006-05-16 00:33:44 +00:00
julien.pierre.bugs%sun.com
42f2f41bff Fix for bug 335036 . NSS_Shutdown() does not check that NSS is initialized. r=nelson, alexei 2006-05-16 00:10:04 +00:00
julien.pierre.bugs%sun.com
5ea61ffe76 Fix for bug 337789 . PK11_FindKeyByAnyCert doe snot work if softoken is in FIPS140-2 mode. r=wtchang, rrelyea, nelson 2006-05-15 23:51:01 +00:00
alexei.volkov.bugs%sun.com
6b1e6d3bf2 [Bug 336482] crash or hopefully deadcode [@ crmf_copy_poposigningkey]
because Pointer "destPopoSignKey" dereferenced before NULL check. r=nelson
2006-05-15 21:05:13 +00:00
alexei.volkov.bugs%sun.com
5940997e85 Patch contributed by jonsmirl@yahoo.com
[Bug 337154] Coverity 321, dead code in mozilla/security/nss/lib/pk11wrap/pk11cert.c. r=wtchang
2006-05-15 20:58:10 +00:00
alexei.volkov.bugs%sun.com
968bb1125f Patch contributed by jonsmirl@yahoo.com
[Bug 337086] Coverity 446, dead code in mozilla/security/nss/lib/certhigh/ocsp.c. r=wtchang
2006-05-15 20:52:01 +00:00
alexei.volkov.bugs%sun.com
7b49a9fc5a Patch contributed by jonsmirl@yahoo.com
[Bug 337085] Coverity 447, dead code in mozilla/security/nss/lib/certhigh/ocsp.c
. r=wtchang
2006-05-15 20:44:46 +00:00
alexei.volkov.bugs%sun.com
02307faea5 Patch contributed by timeless@bemail.org
[Bug 337025] Coverity 411, dead code in mozilla/security/nss/lib/certdb/stanpcertdb.c. r=nelson
2006-05-15 20:39:38 +00:00
christophe.ravel.bugs%sun.com
6618e7b422 Bugzilla 315445: Temp directory for AMD and Intel are the same, hence over writing each others files causing the tests to fail.
r+=glen.beasley
2006-05-15 18:38:48 +00:00
nelson%bolyard.com
4101d409a0 Remove files nsres.h and nsres.c from manifest.mn. Bug 336198. r=wtchang 2006-05-13 00:47:52 +00:00
alexei.volkov.bugs%sun.com
b2eede4173 Patch contributed by timeless@bemail.org
[Bug 336992] crash [@ pk11_DoKeys] "arg" Pointer dereferenced before NULL check. r=nelson
2006-05-13 00:46:51 +00:00
alexei.volkov.bugs%sun.com
39db992bd1 Patch contributed by timeless@bemail.org
[Bug 336972] OOM crash [@ PK11_ImportDERPrivateKeyInfoAndReturnKey] "pki" Pointer allocated by PORT_NewArena dereferenced without NULL check. r=nelson
2006-05-13 00:41:16 +00:00
alexei.volkov.bugs%sun.com
4176224c5b Patch contributed by timeless@bemail.org
[Bug 336466] oom crash [@ CERT_DecodeAuthKeyID]. r=nelson
2006-05-13 00:33:09 +00:00
alexei.volkov.bugs%sun.com
0d612a798a Patch contributed by jonsmirl@yahoo.com
[Bug 336935] Coverity 172, dead code in mozilla/security/nss/lib/softoken/keydb.c. r=nelson, r=alexei.volkov.bugs
2006-05-13 00:27:22 +00:00
julien.pierre.bugs%sun.com
a172cbe397 Fix for bug 336477. Memory leak in CERT_UncacheCRL . r=nelson 2006-05-13 00:27:12 +00:00
alexei.volkov.bugs%sun.com
d76295c913 Patch contributed by jonsmirl@yahoo.com
[Bug 336932] Coverity 163, dead code in mozilla/security/nss/lib/ssl/ssl3con.c. r=nelson
2006-05-13 00:15:43 +00:00
alexei.volkov.bugs%sun.com
73626f65a8 Patch contributed by timeless@bemail.org
[Bug 336481] oom crash [@ crmf_copy_cert_req_msg]
2006-05-13 00:03:12 +00:00
nelson%bolyard.com
28a533ac47 Bug 337093. Remove dead code at label loser in function dbs_readBlob
Patch by Jon Smirl <jonsmirl@yahoo.com>, r=wtchang.  Coverity bug
2006-05-12 23:37:58 +00:00