The original problem is at
http://groups.google.com/groups?dq=&hl=en&lr=&ie=UTF-8&oe=UTF-8&threadm=aiudhj%24k041%40ripley.netscape.com&prev=/groups%3Fdq%3D%26num%3D25%26hl%3Den%26lr%3D%26ie%3DUTF-8%26oe%3DUTF-8%26group%3Dnetscape.public.mozilla.crypto%26start%3D150

In a nutshell, the user's shared lib was crashing the program when it
attempted to load an NSS shared lib in the process memory using
dlopen(). From reading the article, it sounded like the calling
process environment (pointed to by char **environ) needs to always be
*not NULL* otherwise when NSS_init is called, which then calls
RNG_SystemInfoForRNG(), a crash could result...

Shouldn't NSS check for situations when the calling process'
environment is null?

-- POC

Reply via email to