Update net/third_party/nss to NSS 3.15.4.

net/third_party/nss/patches/secretexporterlocks.patch

 diff -pu a/nss/lib/ssl/sslinfo.c b/nss/lib/ssl/sslinfo.c
---- a/nss/lib/ssl/sslinfo.c     2013-07-31 12:07:10.974699609 -0700
-+++ b/nss/lib/ssl/sslinfo.c     2013-07-31 14:11:28.834113906 -0700
-@@ -349,8 +349,13 @@ SSL_ExportKeyingMaterial(PRFileDesc *fd,
+--- a/nss/lib/ssl/sslinfo.c     2014-01-03 19:28:03.550814608 -0800
++++ b/nss/lib/ssl/sslinfo.c     2014-01-03 19:40:13.512748975 -0800
+@@ -350,8 +350,13 @@ SSL_ExportKeyingMaterial(PRFileDesc *fd,
         return SECFailure;
      }
  
 +    ssl_GetRecvBufLock(ss);
 +    ssl_GetSSL3HandshakeLock(ss);
 +
      if (ss->version < SSL_LIBRARY_VERSION_3_1_TLS) {
         PORT_SetError(SSL_ERROR_FEATURE_NOT_SUPPORTED_FOR_VERSION);
 +       ssl_ReleaseSSL3HandshakeLock(ss);
 +       ssl_ReleaseRecvBufLock(ss);
         return SECFailure;
      }
  
-@@ -361,13 +366,17 @@ SSL_ExportKeyingMaterial(PRFileDesc *fd,
+@@ -362,13 +367,17 @@ SSL_ExportKeyingMaterial(PRFileDesc *fd,
      }
      val = PORT_Alloc(valLen);
      if (!val) {
 +       ssl_ReleaseSSL3HandshakeLock(ss);
 +       ssl_ReleaseRecvBufLock(ss);
         return SECFailure;
      }
      i = 0;
 +
      PORT_Memcpy(val + i, &ss->ssl3.hs.client_random.rand, SSL3_RANDOM_LENGTH);
      i += SSL3_RANDOM_LENGTH;
      PORT_Memcpy(val + i, &ss->ssl3.hs.server_random.rand, SSL3_RANDOM_LENGTH);
      i += SSL3_RANDOM_LENGTH;
 +
      if (hasContext) {
         val[i++] = contextLen >> 8;
         val[i++] = contextLen;
-@@ -388,6 +397,8 @@ SSL_ExportKeyingMaterial(PRFileDesc *fd,
+@@ -389,6 +398,8 @@ SSL_ExportKeyingMaterial(PRFileDesc *fd,
                                          valLen, out, outLen);
      }
      ssl_ReleaseSpecReadLock(ss);
 +    ssl_ReleaseSSL3HandshakeLock(ss);
 +    ssl_ReleaseRecvBufLock(ss);
  
      PORT_ZFree(val, valLen);
      return rv;