Update NSPR to 4.12 and NSS to 3.23 on iOS

README.chromium

 Name: Network Security Services (NSS)
 Short Name: nss
 URL: http://www.mozilla.org/projects/security/pki/nss/
 Version: 3.21
 License: MPL 2
 License File: nss/COPYING
 Security Critical: yes
 
 Description:
 NSS 3.21 with NSPR 4.11
@@ skipping 24 matching lines @@
   (The "system" vs. "user" thread distinction comes from Java, and
   ultimately from Solaris threads.)  This is a workaround for
   http://crbug.com/40663.
 - patches/nspr-remove-io.patch: Remove IO operations in NSPR to allow NSS
   to work in the sandbox.  Do not initialize IO when initializing NSPR.
   Windows version of NSPR also tried to use getaddrinfo to resolve hostname
   in a SSL connection.  By removing _PR_HAVE_GETADDRINFO this will force it
   to use PR_GetHostByName.  Removing _PR_INET6_PROBE will prevent it from
   creating an IPv6 socket to probe if IPv6 is there.
   DO NOT upstream this patch.
-- patches/nspr-unused-variable.patch: Remove an unused variable. See NSPR
-  bug 1126408 (https://bugzilla.mozilla.org/show_bug.cgi?id=1126408).
 
 We made the following local changes to NSS.
 
 Files Added:
-- nss/exports_win.def: The list of exports to use when building nss as a
-  dynamic library (crnss.dll).
 - nss/lib/ckfw/builtins/certdata.c: a generated file. Do an upstream NSS
   build and copy the generated certdata.c.
 - nss/lib/freebl/nss_build_config_mac.h: a header that defines the target
   arch specific configuration macros for lib/freebl on iOS and Mac OS X.
   This works around the lack of support for the xcode_settings
   GCC_PREPROCESSOR_DEFINITIONS[arch=foo] by the ninja GYP generator
   (http://crbug.com/122592).
 - nss/lib/freebl/mpi/mpi_arm_mac.c: a wrapper file for mpi_arm.c for iOS
   and Mac OS X. This works around the inability to specify target arch
   specific source files in Xcode.
 
 Patches Applied:
 - patches/nss-remove-fortezza.patch: remove Fortezza certificate support
   from PK11_ImportPublicKey.  See NSS bug 668397
   (https://bugzilla.mozilla.org/show_bug.cgi?id=668397).
 - patches/nss-urandom-abort.patch: call abort() if NSS cannot read from
   /dev/urandom.  See Chromium issue 244661 (http://crbug.com/244661).
-- patches/nss-chacha20-poly1305.patch: Support ChaCha20+Poly1305 cipher
-  suites.  See NSS bug 917571
-  (https://bugzilla.mozilla.org/show_bug.cgi?id=917571).
 - patches/nss-static.patch: to build NSS as static libraries and omit
   libpkix (the new certification path validation library) and
   softoken/legacydb (support for the old Berkeley DB databases).  See NSS
   bug 534471 (https://bugzilla.mozilla.org/show_bug.cgi?id=534471).