Update NSS to 3.21 RTM and NSPR to 4.11 RTM

nss/lib/certhigh/ocspsig.c

 /* This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 #include "plarena.h"
 
 #include "seccomon.h"
 #include "secitem.h"
 #include "secasn1.h"
 #include "secder.h"
@@ skipping 525 matching lines @@
 
     if (!SEC_ASN1EncodeInteger(tmpArena, &response->responseStatus,
                                response->statusValue))
         goto done;
 
     result = SEC_ASN1EncodeItem(arena, NULL, response, ocsp_OCSPResponseTemplate);
 
 done:
     if (privKey)
         SECKEY_DestroyPrivateKey(privKey);
-    if (br->responseSignature.signature.data)
+    if (br && br->responseSignature.signature.data)
         SECITEM_FreeItem(&br->responseSignature.signature, PR_FALSE);
     PORT_FreeArena(tmpArena, PR_FALSE);
 
     return result;
 }
 
 static const SEC_ASN1Template ocsp_OCSPErrorResponseTemplate[] = {
     { SEC_ASN1_SEQUENCE,
         0, NULL, sizeof(CERTOCSPResponse) },
     { SEC_ASN1_ENUMERATED,
@@ skipping 34 matching lines @@
                                response.statusValue))
         return NULL;
 
     result = SEC_ASN1EncodeItem(arena, NULL, &response,
                                 ocsp_OCSPErrorResponseTemplate);
 
     SECITEM_FreeItem(&response.responseStatus, PR_FALSE);
 
     return result;
 }