Built-ins set the ulValueLen to -1 to indicate an unknown attribute type.

1 files changed, 4 insertions, 0 deletions

diff --git a/security/nss/lib/dev/ckhelper.c b/security/nss/lib/dev/ckhelper.c
index f15f5f983..6daf808ac 100644
--- a/security/nss/lib/dev/ckhelper.c
+++ b/security/nss/lib/dev/ckhelper.c
@@ -138,6 +138,10 @@ nssCKObject_GetAttributes
 	for (i=0; i<count; i++) {
 	    CK_ULONG ulValueLen = obj_template[i].ulValueLen;
 	    if (ulValueLen == 0) continue;
+	    if (ulValueLen < 0) {
+		obj_template[i].ulValueLen = 0;
+		continue;
+	    }
 	    if (is_string_attribute(obj_template[i].type)) {
 		ulValueLen++;
 	    }