8442248c89
* latest FIPS changes incl. testsuite fixes (enabled now)
nss-fips-180-3-csp-clearing.patch
nss-fips-tests-enable-fips.patch
nss-fips-tests-skip.patch
nss-fips-pbkdf-kat-compliance.patch
- update to NSS 3.79
* bmo#205717 - Use PK11_GetSlotInfo instead of raw C_GetSlotInfo calls.
* bmo#1766907 - Update mercurial in clang-format docker image.
* bmo#1454072 - Use of uninitialized pointer in lg_init after alloc fail.
* bmo#1769295 - selfserv and tstclnt should use PR_GetPrefLoopbackAddrInfo.
* bmo#1753315 - Add SECMOD_LockedModuleHasRemovableSlots.
* bmo#1387919 - Fix secasn1d parsing of indefinite SEQUENCE inside
indefinite GROUP.
* bmo#1765753 - Added RFC8422 compliant TLS <= 1.2 undefined/compressed
ECPointFormat extension alerts.
* bmo#1765753 - TLS 1.3 Server: Send protocol_version alert on
unsupported ClientHello.legacy_version.
* bmo#1764788 - Correct invalid record inner and outer content type alerts.
* bmo#1757075 - NSS does not properly import or export pkcs12 files
with large passwords and pkcs5v2 encoding.
* bmo#1766978 - improve error handling after nssCKFWInstance_CreateObjectHandle.
* bmo#1767590 - Initialize pointers passed to
NSS_CMSDigestContext_FinishMultiple.
* bmo#1769302 - NSS 3.79 should depend on NSPR 4.34
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/mozilla-nss?expand=0&rev=386
41 lines
1.1 KiB
Diff
41 lines
1.1 KiB
Diff
Index: nss/lib/freebl/pqg.c
|
|
===================================================================
|
|
--- nss.orig/lib/freebl/pqg.c
|
|
+++ nss/lib/freebl/pqg.c
|
|
@@ -1232,6 +1232,9 @@ cleanup:
|
|
MP_TO_SEC_ERROR(err);
|
|
rv = SECFailure;
|
|
}
|
|
+ if (rv != SECSuccess) {
|
|
+ mp_zero(G);
|
|
+ }
|
|
return rv;
|
|
}
|
|
|
|
Index: nss/lib/softoken/sftkdb.c
|
|
===================================================================
|
|
--- nss.orig/lib/softoken/sftkdb.c
|
|
+++ nss/lib/softoken/sftkdb.c
|
|
@@ -1506,7 +1506,7 @@ loser:
|
|
PORT_ZFree(data, dataSize);
|
|
}
|
|
if (arena) {
|
|
- PORT_FreeArena(arena, PR_FALSE);
|
|
+ PORT_FreeArena(arena, PR_TRUE);
|
|
}
|
|
return crv;
|
|
}
|
|
Index: nss/lib/softoken/sftkpwd.c
|
|
===================================================================
|
|
--- nss.orig/lib/softoken/sftkpwd.c
|
|
+++ nss/lib/softoken/sftkpwd.c
|
|
@@ -1439,7 +1439,7 @@ loser:
|
|
PORT_ZFree(newKey.data, newKey.len);
|
|
}
|
|
if (result) {
|
|
- SECITEM_FreeItem(result, PR_TRUE);
|
|
+ SECITEM_ZfreeItem(result, PR_TRUE);
|
|
}
|
|
if (rv != SECSuccess) {
|
|
(*keydb->db->sdb_Abort)(keydb->db);
|