Update NSS to NSS_3_16_RC0.

nss/lib/pki/tdcache.c

 /* This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 #ifndef PKIM_H
 #include "pkim.h"
 #endif /* PKIM_H */
 
 #ifndef PKIT_H
 #include "pkit.h"
@@ skipping 450 matching lines @@
     NSSCertificate **cp, **cached = NULL;
     nssList *certList;
     PRUint32 count;
     certList = nssList_Create(NULL, PR_FALSE);
     if (!certList) return PR_FAILURE;
     (void)nssTrustDomain_GetCertsFromCache(td, certList);
     count = nssList_Count(certList);
     if (count > 0) {
         cached = nss_ZNEWARRAY(NULL, NSSCertificate *, count + 1);
         if (!cached) {
+            nssList_Destroy(certList);
             return PR_FAILURE;
         }
         nssList_GetArray(certList, (void **)cached, count);
-        nssList_Destroy(certList);
         for (cp = cached; *cp; cp++) {
             nssCryptokiObject *instance;
             NSSCertificate *c = *cp;
             nssTokenSearchType tokenOnly = nssTokenSearchType_TokenOnly;
             instance = nssToken_FindCertificateByIssuerAndSerialNumber(
                                                                token,
                                                                NULL,
                                                                &c->issuer,
                                                                &c->serial,
                                                                tokenOnly,
                                                                NULL);
             if (instance) {
                 nssPKIObject_AddInstance(&c->object, instance);
                 STAN_ForceCERTCertificateUpdate(c);
             }
         }
         nssCertificateArray_Destroy(cached);
     }
+    nssList_Destroy(certList);
     return PR_SUCCESS;
 }
 
 static PRStatus
 add_issuer_and_serial_entry (
   NSSArena *arena,
   nssTDCertificateCache *cache, 
   NSSCertificate *cert
 )
 {
@@ skipping 634 matching lines @@
 nssTrustDomain_DumpCacheInfo (
   NSSTrustDomain *td,
   void (* cert_dump_iter)(const void *, void *, void *),
   void *arg
 )
 {
     PZ_Lock(td->cache->lock);
     nssHash_Iterate(td->cache->issuerAndSN, cert_dump_iter, arg);
     PZ_Unlock(td->cache->lock);
 }