406647 - libpkix does not use user defined revocation checkers.r=nelson

security/nss/lib/libpkix/pkix/top/pkix_build.c

@@ -1285,9 +1285,6 @@ pkix_Build_ValidationCheckers(
         PKIX_CHECK(PKIX_List_Create(&checkers, plContext),
                 PKIX_LISTCREATEFAILED);
 
-        PKIX_CHECK(PKIX_List_Create(&revCheckers, plContext),
-                PKIX_LISTCREATEFAILED);
-
         PKIX_CHECK(PKIX_List_ReverseList
                 (certChain, &reversedCertChain, plContext),
                 PKIX_LISTREVERSELISTFAILED);
@@ -1410,6 +1407,18 @@ pkix_Build_ValidationCheckers(
                 }
         }
 
+        if (procParams->revCheckers) {
+            PKIX_CHECK(
+                PKIX_PL_Object_Duplicate(
+                    (PKIX_PL_Object*)procParams->revCheckers,
+                    (PKIX_PL_Object **)&revCheckers,
+                    plContext),
+                PKIX_LISTDUPLICATEFAILED);
+        } else {
+            PKIX_CHECK(PKIX_List_Create(&revCheckers, plContext),
+                       PKIX_LISTCREATEFAILED);
+        }
+
         if ((state->dsaParamsNeeded) || (state->revCheckDelayed)) {
 
                 if ((state->dsaParamsNeeded) ||