Uprev NSS (in libssl) to NSS 3.21

net/third_party/nss/ssl/ssl3gthr.c

 /*
  * Gather (Read) entire SSL3 records from socket into buffer.  
  *
  * This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 #include "cert.h"
 #include "ssl.h"
 #include "sslimpl.h"
@@ skipping 53 matching lines @@
             SSL_TRC(30, ("%d: SSL3[%d]: EOF", SSL_GETPID(), ss->fd));
             rv = 0;
             break;
         } else /* if (nb < 0) */ {
             SSL_DBG(("%d: SSL3[%d]: recv error %d", SSL_GETPID(), ss->fd,
                      PR_GetError()));
             rv = SECFailure;
             break;
         }
 
-        PORT_Assert( nb <= gs->remainder );
-        if (nb > gs->remainder) {
+        PORT_Assert( (unsigned int)nb <= gs->remainder );
+        if ((unsigned int)nb > gs->remainder) {
             /* ssl_DefRecv is misbehaving!  this error is fatal to SSL. */
             gs->state = GS_INIT;         /* so we don't crash next time */
             rv = SECFailure;
             break;
         }
 
         gs->offset    += nb;
         gs->remainder -= nb;
         if (gs->state == GS_DATA)
             gs->inbuf.len += nb;
@@ skipping 360 matching lines @@
     /* ssl3_GatherCompleteHandshake requires both of these locks. */
     PORT_Assert( ss->opt.noLocks || ssl_Have1stHandshakeLock(ss) );
     PORT_Assert( ss->opt.noLocks || ssl_HaveRecvBufLock(ss) );
 
     do {
         rv = ssl3_GatherCompleteHandshake(ss, flags);
     } while (rv > 0 && ss->gs.buf.len == 0);
 
     return rv;
 }