Handle cases when user cert database has NULL slots

chromeos/cert_loader_unittest.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chromeos/cert_loader.h"
 
 #include "base/bind.h"
 #include "base/file_util.h"
 #include "base/memory/scoped_ptr.h"
 #include "base/message_loop/message_loop.h"
 #include "base/run_loop.h"
 #include "crypto/nss_util.h"
 #include "crypto/nss_util_internal.h"
+#include "crypto/scoped_nss_types.h"
 #include "net/base/net_errors.h"
 #include "net/base/test_data_directory.h"
 #include "net/cert/nss_cert_database_chromeos.h"
 #include "net/cert/x509_certificate.h"
 #include "net/test/cert_test_util.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
 namespace chromeos {
 namespace {
 
@@ skipping 273 matching lines @@
             primary_db_->GetCertTrust(certs[0], net::CA_CERT));
   ASSERT_TRUE(primary_db_->SetCertTrust(
       certs[0], net::CA_CERT, net::NSSCertDatabase::TRUSTED_SSL));
 
   // Cert trust change should trigger certificate reload in cert_loader_.
   ASSERT_EQ(0U, GetAndResetCertificatesLoadedEventsCount());
   base::RunLoop().RunUntilIdle();
   EXPECT_EQ(1U, GetAndResetCertificatesLoadedEventsCount());
 }
 
+TEST_F(CertLoaderTest, DatabaseWithUnsetSlots) {
+  primary_db_.reset(new net::NSSCertDatabaseChromeOS(crypto::ScopedPK11Slot(),
+                                                     crypto::ScopedPK11Slot()));
+  primary_db_->SetSlowTaskRunnerForTest(message_loop_.message_loop_proxy());
+  cert_loader_->StartWithNSSDB(primary_db_.get());
+
+  base::RunLoop().RunUntilIdle();
+  EXPECT_EQ(1u, GetAndResetCertificatesLoadedEventsCount());
+
+  EXPECT_TRUE(cert_loader_->certificates_loaded());
+  EXPECT_EQ(-1, cert_loader_->TPMTokenSlotID());
+  EXPECT_FALSE(cert_loader_->IsHardwareBacked());
+}
+
 }  // namespace
 }  // namespace chromeos