Do not call NSS functions if NSS initialization failed....

net/base/x509_certificate_nss.cc

 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/x509_certificate.h"
 
 #include <cert.h>
+#include <nss.h>
 #include <pk11pub.h>
 #include <prerror.h>
 #include <prtime.h>
 #include <secder.h>
 #include <secerr.h>
 #include <sechash.h>
 #include <sslerr.h>
 
 #include "base/logging.h"
 #include "base/pickle.h"
@@ skipping 697 matching lines @@
     return false;
 
   return true;
 }
 
 // static
 X509Certificate::OSCertHandle X509Certificate::CreateOSCertHandleFromBytes(
     const char* data, int length) {
   base::EnsureNSSInit();
 
+  if (!NSS_IsInitialized())
+    return NULL;
+
   // Make a copy of |data| since CERT_DecodeCertPackage might modify it.
   char* data_copy = new char[length];
   memcpy(data_copy, data, length);
 
   // Parse into a certificate structure.
   CERTCertificate* cert = CERT_DecodeCertFromPackage(data_copy, length);
   delete [] data_copy;
   if (!cert)
     LOG(ERROR) << "Couldn't parse a certificate from " << length << " bytes";
   return cert;
@@ skipping 20 matching lines @@
   DCHECK(0 != cert->derCert.len);
 
   SECStatus rv = HASH_HashBuf(HASH_AlgSHA1, sha1.data,
                               cert->derCert.data, cert->derCert.len);
   DCHECK(rv == SECSuccess);
 
   return sha1;
 }
 
 }  // namespace net