me, 2.0: bug hunting: mozilla

me, 2.0: jose nazario beauty and the street

bug hunting: mozilla

found and filed a bug in mozilla. not sure of the implications, looks like realibility and not security.

by the way i've left out a couple of security related bugs while they get addressed.

--- security/nss/lib/pk11wrap/pk11util.c.orig   Sat Oct  7 08:58:16 2006
+++ security/nss/lib/pk11wrap/pk11util.c        Sat Oct  7 08:58:26 2006
@@ -1128,7 +1128,7 @@
        crv = PK11_GETTAB(mod)->C_Finalize(NULL);
        /* ok, we slammed the module down, now we need to reinit it in case
         * we intend to use it again */
-       if (crv = CKR_OK) {
+       if (crv == CKR_OK) {
            secmod_ModuleInit(mod);
        } else {
            /* Finalized failed for some reason,  notify the application

update: damn, it's a duplicate. of a duplicate. real bug, fixed a while ago.

next Saturday, Oct 07, 2006 @ 02:22pm | previous Saturday, Oct 07, 2006 @ 02:15pm | archives

Last modified: Saturday, Oct 07, 2006 @ 02:16pm

Your Ad Here