Update NSPR to 4.12 and NSS to 3.23 on iOS

nss/lib/freebl/rijndael.c

 /* This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 #ifdef FREEBL_NO_DEPEND
 #include "stubs.h"
 #endif
 
 #include "prinit.h"
+#include "prenv.h"
 #include "prerr.h"
 #include "secerr.h"
 
 #include "prtypes.h"
 #include "blapi.h"
 #include "rijndael.h"
 
 #include "cts.h"
 #include "ctr.h"
 #include "gcm.h"
 
 #ifdef USE_HW_AES
 #include "intel-aes.h"
 #include "mpi.h"
 
 static int has_intel_aes = 0;
 static PRBool use_hw_aes = PR_FALSE;
 
 #ifdef INTEL_GCM
 #include "intel-gcm.h"
 static int has_intel_avx = 0;
 static int has_intel_clmul = 0;
 static PRBool use_hw_gcm = PR_FALSE;
+#if defined(_MSC_VER) && !defined(_M_IX86)
+#include <intrin.h>  /* for _xgetbv() */
+#endif
 #endif
 #endif  /* USE_HW_AES */
 
 /*
  * There are currently five ways to build this code, varying in performance
  * and code size.
  *
  * RIJNDAEL_INCLUDE_TABLES         Include all tables from rijndael32.tab
  * RIJNDAEL_GENERATE_TABLES        Generate tables on first 
  *                                 encryption/decryption, then store them;
@@ skipping 988 matching lines @@
         PORT_SetError(SEC_ERROR_INVALID_ARGS);
         return SECFailure;
     }
     if (!cx) {
         PORT_SetError(SEC_ERROR_INVALID_ARGS);
         return SECFailure;
     }
 #ifdef USE_HW_AES
     if (has_intel_aes == 0) {
         unsigned long eax, ebx, ecx, edx;
-        char *disable_hw_aes = getenv("NSS_DISABLE_HW_AES");
+        char *disable_hw_aes = PR_GetEnvSecure("NSS_DISABLE_HW_AES");
 
         if (disable_hw_aes == NULL) {
             freebl_cpuid(1, &eax, &ebx, &ecx, &edx);
             has_intel_aes = (ecx & (1 << 25)) != 0 ? 1 : -1;
 #ifdef INTEL_GCM
             has_intel_clmul = (ecx & (1 << 1)) != 0 ? 1 : -1;
             if ((ecx & (1 << 27)) != 0 && (ecx & (1 << 28)) != 0 &&
                 check_xcr0_ymm()) {
                 has_intel_avx = 1;
             } else {
@@ skipping 262 matching lines @@
         return SECFailure;
     }
     if (maxOutputLen < inputLen) {
         PORT_SetError(SEC_ERROR_OUTPUT_LEN);
         return SECFailure;
     }
     *outputLen = inputLen;
     return (*cx->worker)(cx->worker_cx, output, outputLen, maxOutputLen,        
                              input, inputLen, blocksize);
 }