Update NSPR to 4.12 and NSS to 3.23 on iOS

nss/lib/softoken/softoken.h

 /*
  * softoken.h - private data structures and prototypes for the softoken lib
  *
  * This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 #ifndef _SOFTOKEN_H_
 #define _SOFTOKEN_H_
 
@@ skipping 134 matching lines @@
 
 /*
 ** macros to check for forked child process after C_Initialize
 */
 #if defined(XP_UNIX) && !defined(NO_FORK_CHECK)
 
 #ifdef DEBUG
 
 #define FORK_ASSERT() \
     { \
-        char* forkAssert = getenv("NSS_STRICT_NOFORK"); \
+        char* forkAssert = PR_GetEnvSecure("NSS_STRICT_NOFORK"); \
         if ( (!forkAssert) || (0 == strcmp(forkAssert, "1")) ) { \
             PORT_Assert(0); \
         } \
     }
 
 #else
 
 #define FORK_ASSERT()
 
 #endif
@@ skipping 66 matching lines @@
         if (!sftkForkCheckDisabled && PARENT_FORKED()) { \
             FORK_ASSERT(); \
             return CKR_DEVICE_ERROR; \
         } \
     } while (0)
 
 #define SKIP_AFTER_FORK(x) if (!parentForkedAfterC_Initialize) x
 
 #define ENABLE_FORK_CHECK() \
     { \
-        char* doForkCheck = getenv("NSS_STRICT_NOFORK"); \
+        char* doForkCheck = PR_GetEnvSecure("NSS_STRICT_NOFORK"); \
         if ( doForkCheck && !strcmp(doForkCheck, "DISABLED") ) { \
             sftkForkCheckDisabled = PR_TRUE; \
         } \
     }
 
 
 #else
 
 /* non-Unix platforms, or fork check disabled */
 
 #define CHECK_FORK()
 #define SKIP_AFTER_FORK(x) x
 #define ENABLE_FORK_CHECK()
 
 #ifndef NO_FORK_CHECK
 #define NO_FORK_CHECK
 #endif
 
 #endif
 
 
 SEC_END_PROTOS
 
 #endif /* _SOFTOKEN_H_ */