Update to NSS 3.12.7 and NSPR 4.8.6....

nss/mozilla/security/nss/lib/pk11wrap/pk11cert.c

 /* ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
  * the License. You may obtain a copy of the License at
  * http://www.mozilla.org/MPL/
  *
  * Software distributed under the License is distributed on an "AS IS" basis,
  * WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
@@ skipping 2459 matching lines @@
         CERT_DestroyCertList(certs);
         certs = NULL;
     }
 
     return certs;
 }
 
 PK11SlotList *
 PK11_GetAllSlotsForCert(CERTCertificate *cert, void *arg)
 {
-    NSSCertificate *c = STAN_GetNSSCertificate(cert);
-    /* add multiple instances to the cert list */
     nssCryptokiObject **ip;
-    nssCryptokiObject **instances = nssPKIObject_GetInstances(&c->object);
     PK11SlotList *slotList;
+    NSSCertificate *c;
+    nssCryptokiObject **instances;
     PRBool found = PR_FALSE;
 
     if (!cert) {
         PORT_SetError(SEC_ERROR_INVALID_ARGS);
         return NULL;
     }
 
+    c = STAN_GetNSSCertificate(cert);
+    if (!c) {
+        CERT_MapStanError();
+        return NULL;
+    }
+
+    /* add multiple instances to the cert list */
+    instances = nssPKIObject_GetInstances(&c->object);
     if (!instances) {
         PORT_SetError(SEC_ERROR_NO_TOKEN);
         return NULL;
     }
 
     slotList = PK11_NewSlotList();
     if (!slotList) {
         nssCryptokiObjectArray_Destroy(instances);
         return NULL;
     }
 
     for (ip = instances; *ip; ip++) {
         nssCryptokiObject *instance = *ip;
         PK11SlotInfo *slot = instance->token->pk11slot;
         if (slot) {
             PK11_AddSlotToList(slotList, slot);
             found = PR_TRUE;
         }
     }
     if (!found) {
         PK11_FreeSlotList(slotList);
         PORT_SetError(SEC_ERROR_NO_TOKEN);
         slotList = NULL;
     }
 
     nssCryptokiObjectArray_Destroy(instances);
     return slotList;
 }