Update third_party/nss to 3.15.5 Beta 2.

nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c

 /* This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 /*
  * pkix_pl_aiamgr.c
  *
  * AIAMgr Object Definitions
  *
  */
 
@@ skipping 118 matching lines @@
  *  or "nss.red.iplanet.com:1389". If a match is found, that LDAPClient is
  *  stored at "pClient". Otherwise, an LDAPClient is created and added to the
  *  collection, and then stored at "pClient".
  *
  * PARAMETERS:
  *  "aiaMgr"
  *      The AIAMgr whose LDAPClient connected are to be managed. Must be
  *      non-NULL.
  *  "domainName"
  *      Address of a string pointing to a server name. Must be non-NULL.
+ *      An empty string (which means no <host> is given in the LDAP URL) is
+ *      not supported.
  *  "pClient"
  *      Address at which the returned LDAPClient is stored. Must be non-NULL.
  *  "plContext"
  *      Platform-specific context pointer.
  * THREAD SAFETY:
  *  Thread Safe (see Thread Safety Definitions in Programmer's Guide)
  * RETURNS:
  *  Returns NULL if the function succeeds.
  *  Returns an AIAMgr Error if the function fails in a non-fatal way
  *  Returns a Fatal Error if the function fails in an unrecoverable way.
  */
 static PKIX_Error *
 pkix_pl_AiaMgr_FindLDAPClient(
         PKIX_PL_AIAMgr *aiaMgr,
         char *domainName,
         PKIX_PL_LdapClient **pClient,
         void *plContext)
 {
         PKIX_PL_String *domainString = NULL;
         PKIX_PL_LdapDefaultClient *client = NULL;
 
         PKIX_ENTER(AIAMGR, "pkix_pl_AiaMgr_FindLDAPClient");
         PKIX_NULLCHECK_THREE(aiaMgr, domainName, pClient);
 
+        /*
+         * An LDAP URL may not have a <host> part, for example,
+         *     ldap:///o=University%20of%20Michigan,c=US
+         * PKIX_PL_LdapDefaultClient doesn't know how to discover the default
+         * LDAP server, so we don't support this kind of LDAP URL.
+         */
+        if (*domainName == '\0') {
+                /* Simulate a PKIX_PL_LdapDefaultClient_CreateByName failure. */
+                PKIX_ERROR(PKIX_LDAPDEFAULTCLIENTCREATEBYNAMEFAILED);
+        }
+
         /* create PKIX_PL_String from domain name */
         PKIX_CHECK(PKIX_PL_String_Create
                 (PKIX_ESCASCII, domainName, 0, &domainString, plContext),
                 PKIX_STRINGCREATEFAILED);
 
         /* Is this domainName already in cache? */
         PKIX_CHECK(PKIX_PL_HashTable_Lookup
                 (aiaConnectionCache,
                 (PKIX_PL_Object *)domainString,
                 (PKIX_PL_Object **)&client,
@@ skipping 504 matching lines @@
 #ifndef NSS_PKIX_NO_LDAP
                 PKIX_DECREF(aiaMgr->client.ldapClient);
 #endif
         }
 
         PKIX_DECREF(certs);
         PKIX_DECREF(ia);
 
         PKIX_RETURN(AIAMGR);
 }