Update NSS to 3.21 RTM and NSPR to 4.11 RTM

nss/lib/freebl/cts.c

 /* This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 #ifdef FREEBL_NO_DEPEND
 #include "stubs.h"
 #endif
 #include "blapit.h"
 #include "blapii.h"
 #include "cts.h"
@@ skipping 167 matching lines @@
                 const unsigned char *inbuf, unsigned int inlen,
                 unsigned int blocksize)
 {
     unsigned char *Pn;
     unsigned char Cn_2[MAX_BLOCK_SIZE]; /* block Cn-2 */
     unsigned char Cn_1[MAX_BLOCK_SIZE]; /* block Cn-1 */
     unsigned char Cn[MAX_BLOCK_SIZE];   /* block Cn   */
     unsigned char lastBlock[MAX_BLOCK_SIZE];
     const unsigned char *tmp;
     unsigned int tmpLen;
-    int fullblocks, pad;
+    unsigned int fullblocks, pad;
     unsigned int i;
     SECStatus rv;
 
     if (inlen < blocksize) {
         PORT_SetError(SEC_ERROR_INPUT_LEN);
         return SECFailure;
     }
 
     if (maxout < inlen) {
         *outlen = inlen;
@@ skipping 93 matching lines @@
      * only the side effect of setting the internal IV */
     (void) (*cts->cipher)(cts->context, lastBlock, &tmpLen, blocksize, Cn,
                 blocksize, blocksize);
     /* clear last block. At this point last block contains Pn xor Cn_1 xor
      * Cn_2, both of with an attacker would know, so we need to clear this
      * buffer out */
     PORT_Memset(lastBlock, 0, blocksize);
     /* Cn, Cn_1, and Cn_2 have encrypted data, so no need to clear them */
     return SECSuccess;
 }