3b9a109d82
353908: klocwork OOM crash in tdcache.c. r=nelson
2006-10-09 22:29:12 +00:00
45f5a763d7
Fix for bug 225525 . Resolve race assigning NSSCertificate fields which leaked memory and slot reference. r=nelson
2006-08-22 22:54:11 +00:00
e1b759198c
[Bug 337009] OOM crash [@ nssList_Count - nssTrustDomain_GetCertsFromCache] Dereferencing possibly NULL "certList". r=nelson
2006-05-17 20:38:59 +00:00
2a3bb9d1e0
Bugzilla Bug 295754: moved duplicate function subject_list_sort to
...
certificate.c and renamed it nssCertificate_SubjectListSort.
r=relyea,nelsonb.
Modified files: certificate.c pkim.h pkistore.c tdcache.c
2005-06-27 21:50:06 +00:00
dd3c6f24d1
Bugzilla Bug 295754: fixed a crash in subject_list_sort if a cert is not
...
decodable (e.g., it has unsupported critical extension). r=relyea,nelsonb.
Modified Files: pkistore.c tdcache.c
2005-06-24 00:33:28 +00:00
82b1183c84
Bugzilla Bug 267158: removed the $Name$ RCS keyword from our source files.
...
This keyword adds noise to the output of "ident libnss3.so | grep NSS"
on our debug build, and appears to cause spurious CVS conflicts. r=nelsonb.
2005-01-20 02:25:51 +00:00
3634d4d94b
Bug 236613: change to MPL/LGPL/GPL tri-license.
2004-04-25 15:03:26 +00:00
fac46295ff
Bugzilla bug 228624: we need to call STAN_ForceCERTCertificateUpdate if
...
the cert's instances changed. r=relyea.
2003-12-19 22:33:12 +00:00
991ddf2ba6
Bugzilla bug 228624: made PK11_ListCertsInSlot reach into the Stan layer
...
to obtain the correct nicknames of the cert instances (pk11cert.c). Fixed
the bug that if a cert we want to add the the cache is already in the
cache, we should merge the instances of the cert before destroying the
duplicate cert (tdcache.c). r=jpierre,relyea.
2003-12-18 18:23:17 +00:00
788ad0837b
Bug 212112: we don't need to lock td->cache->lock while calling
...
STAN_ForceCERTCertificateUpdate. This fixed a recursive deadlock.
r=mcgreer.
2003-07-10 01:24:17 +00:00
cd80470fa2
Bug 186586: If at NSS shutdown there are still certs in the cert caches,
...
cause NSS shutdown and the next NSS initialization to fail but do not
destroy the cert caches (and the crypto context and trust domain containing
them) to avoid a crash if the NSS client destroys the certs later. New
error codes needed to be added to indicate the failure of NSS shutdown and
NSS initialization due to this cause.
Modified Files:
base/errorval.c nss/nssinit.c pki/pki3hack.c pki/pki3hack.h
pki/pkistore.c pki/pkistore.h pki/tdcache.c pki/trustdomain.c
util/secerr.h
2003-01-08 21:48:47 +00:00
9ec0046baa
bug 177366, clean up refcounting
...
r=relyea
2002-11-06 18:53:55 +00:00
b155ff5183
Change coding style used in nss/lib/pki to one that works with ctags.
...
Bug 169999. Modified Files:
asymmkey.c certdecode.c certificate.c cryptocontext.c pki3hack.c
pkibase.c pkistore.c symmkey.c tdcache.c trustdomain.c
2002-09-23 21:32:35 +00:00
abac680269
fix bugs in cert import with smart card cache
2002-04-22 14:14:44 +00:00
a7ab27bc63
re-sync the trust domain cache with token insertion/removal
2002-04-19 23:06:44 +00:00
77950da5b1
Remember the nickname in the cache entry so that we can always free it when the cert goes away, even if the nickname has changes.
...
Also, initialize subjectList to NULL at the beginning, so we don't try to add nickname when we aren't supposed to.
2002-04-18 17:52:55 +00:00
a7256cf9ec
bug 135521, change cert lookups on tokens to be actual finds instead of traversals
2002-04-15 15:22:11 +00:00
ab7d7da30f
bug 129298, handle different nicknames across tokens
...
r=relyea/a=wtc
2002-03-07 22:08:00 +00:00
5494fb48cd
bug 125808, fix crash seen with Javi's db
2002-03-04 21:06:10 +00:00
4edd6cfd21
localize the adding of cert references to one function to save an iteration, add two NULL pointer checks
2002-02-08 21:47:05 +00:00
cf2e1cd363
bug 124309, fix various issues with the cache/temp store and thread safety. Is one line different than the patch on the bug, the one line seemed to fix the reported crash.
2002-02-08 02:51:41 +00:00
89d46447f6
fixes for bugs 123479 and 123081 (possibly others). break up arena usage in hash table entries for the temp store and cert cache.
2002-02-05 23:55:43 +00:00
7f14d4e1fb
bug 90518, implement methods for dumping the state of the cache and temp cert store in NSS 3.4
2002-01-31 17:08:32 +00:00
009e87cee3
fix crash seen in PSM
2002-01-11 00:41:26 +00:00
475f3ab332
back out previous change
...
Unlike the other hash indexes, the issuer and serial is unique. If the issuer and serial exists in the cache, the cert pointer must be valid (the cache is holding a reference).
2002-01-10 14:28:53 +00:00
9aa794ecc7
also allocate hash key entry for issuer/serial, by creating an "index" cert in the cache's arena
2002-01-09 21:35:42 +00:00
b88038f258
several memory-related fixes
...
- correct reference counting when combining certs taken from cache and obtained new
- cache keys need to be alloc'ed, for the case when one cert is used to create the cache entry, another (same subject/nick/email) is added, then the first is removed and freed
2002-01-09 21:09:21 +00:00
82b1f2de39
move handling of certificate reference counting into Stan. NSS 3.4 needs to maintain persistent references of both temp and perm certs in order to replicate the old temp database.
2002-01-03 20:09:30 +00:00
439829ce28
implement local store of objects for crypto context
2001-12-14 17:32:23 +00:00
ca29823a8d
only do the replacement if a new cert was created
2001-12-10 20:08:15 +00:00
728feb40d4
wrong function name
2001-12-10 19:16:18 +00:00
88bfada044
handle race condition where attempt is made to add cert to cache when it is already present (from being added by another thread).
2001-12-10 19:05:51 +00:00
75f3b7599d
Clean up compilier warnings on Solaris and Linux, most particularly:
...
1) Implicit declaration of function.
2) Possibly unitialized variables.
These warnings have indicated some real problems in the code, so many changes
are not just to silence the warnings, but to fix the problems. Others were
inocuous, but the warnings were silenced to reduce the noise.
2001-12-07 01:36:25 +00:00
054d08b4cd
fix memory leaks
2001-11-29 19:34:08 +00:00
2d130b0ba5
solaris x86 doesn't seem to like PR_LOG, so turning it off by default in debug builds
2001-11-28 20:19:38 +00:00
8069de9d9e
land changes for handling temporary and cached certs in 3.4
...
* separate trust object from cert object
* move handling of cryptoki objects into libdev
* implement digest in libdev (for trust object indexing)
* fixes in cache implementation; connect cache to 3.4 certs
* implement CERT_NewTempCertificate via crypto context
2001-11-28 16:23:51 +00:00
70bdc6a50c
a plethora of changes for handling S/MIME certs
2001-11-08 20:46:11 +00:00
e27189dd1d
Land BOB_WORK_BRANCH unto the tip.
...
remove lots of depricated files.
move some files to appropriate directories (pcertdb *_rand
associated headers to soft token, for instance)
rename several stan files which had the same name as other nss files.
remove depricated functions.
2001-11-08 00:15:51 +00:00
2832a8e74a
code for handling trust through softoken
2001-11-05 17:29:27 +00:00
3c7209811e
get/set cert trust through PKCS#11; traversal methods for CERT_ calls; define usage for 3.4
2001-10-19 18:16:45 +00:00
a70ca44727
some more cert lookup methods; find cert issuer/chain; mimic nickname as "token name:nickname"
2001-10-17 14:40:27 +00:00
e05086ed8b
make the subject list sorted by valid times
2001-10-15 17:18:06 +00:00
c13519619d
more solaris fixes
2001-10-11 18:40:34 +00:00
c9daa6e1b2
a number of windows build fixes
2001-10-11 17:41:47 +00:00
dac43ba788
define decoded cert type; implement cert cache; glue code for old NSS types; define global default trust domain
2001-10-11 16:34:49 +00:00
alexei.volkov.bugs%sun.com
julien.pierre.bugs%sun.com
wtchang%redhat.com
gerv%gerv.net
wchang0222%aol.com
wtc%netscape.com
ian.mcgreer%sun.com
nelsonb%netscape.com
relyea%netscape.com