summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorrelyea%netscape.com <devnull@localhost>2003-03-22 00:22:26 +0000
committerrelyea%netscape.com <devnull@localhost>2003-03-22 00:22:26 +0000
commitc75215835d8fa5e5929b0432384ba8a70b037d34 (patch)
tree6e6cc75e5b5154894b28c3b136b27331f1d754d2
parent1abf6210a3b7c009f019ab4dc18b2510eb808415 (diff)
downloadnss-hg-c75215835d8fa5e5929b0432384ba8a70b037d34.tar.gz
bug 168393 PK11SDR_Decrypt() does not call PK11_Authenticate() before search
for the key.
-rw-r--r--security/nss/lib/pk11wrap/pk11sdr.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/security/nss/lib/pk11wrap/pk11sdr.c b/security/nss/lib/pk11wrap/pk11sdr.c
index f615e2ae1..613000ecf 100644
--- a/security/nss/lib/pk11wrap/pk11sdr.c
+++ b/security/nss/lib/pk11wrap/pk11sdr.c
@@ -282,6 +282,9 @@ PK11SDR_Decrypt(SECItem *data, SECItem *result, void *cx)
slot = PK11_GetInternalKeySlot();
if (!slot) { rv = SECFailure; goto loser; }
+ rv = PK11_Authenticate(slot, PR_TRUE, cx);
+ if (rv != SECSuccess) goto loser;
+
/* Use triple-DES (Should look up the algorithm) */
type = CKM_DES3_CBC;
key = PK11_FindFixedKey(slot, type, &sdrResult.keyid, cx);