Apply the fix for NSS bug 1021102 from the NSS upstream.

nss/lib/softoken/pkcs11.c

 /* This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 /*
  * This file implements PKCS 11 on top of our existing security modules
  *
  * For more information about PKCS 11 See PKCS 11 Token Inteface Standard.
  *   This implementation has two slots:
  *      slot 1 is our generic crypto support. It does not require login.
  *   It supports Public Key ops, and all they bulk ciphers and hashes. 
@@ skipping 2039 matching lines @@
     if (!prime2 || prime2->attrib.pValue != tmpKey.prime2.data) {
         crv = sftk_forceAttribute(object, CKA_PRIME_2,
                                   sftk_item_expand(&tmpKey.prime2));
         if (crv != CKR_OK) goto loser;
     }
     if (!exponent1 || exponent1->attrib.pValue != tmpKey.exponent1.data) {
         crv = sftk_forceAttribute(object, CKA_EXPONENT_1,
                                  sftk_item_expand(&tmpKey.exponent1));
         if (crv != CKR_OK) goto loser;
     }
-    if (!exponent1 || exponent1->attrib.pValue != tmpKey.exponent1.data) {
+    if (!exponent2 || exponent2->attrib.pValue != tmpKey.exponent2.data) {
         crv = sftk_forceAttribute(object, CKA_EXPONENT_2,
                                   sftk_item_expand(&tmpKey.exponent2));
         if (crv != CKR_OK) goto loser;
     }
-    if (!exponent1 || exponent1->attrib.pValue != tmpKey.exponent1.data) {
+    if (!coefficient || coefficient->attrib.pValue != tmpKey.coefficient.data) {
         crv = sftk_forceAttribute(object, CKA_COEFFICIENT,
                                   sftk_item_expand(&tmpKey.coefficient));
         if (crv != CKR_OK) goto loser;
     }
     rv = SECSuccess;
 
     /* we're done (one way or the other), clean up all our stuff */
 loser:
     if (tmpKey.arena) {
         PORT_FreeArena(tmpKey.arena,PR_TRUE);
     }
     if (modulus) {
         sftk_FreeAttribute(modulus);
     }
     if (prime1) {
         sftk_FreeAttribute(prime1);
     }
     if (prime2) {
         sftk_FreeAttribute(prime2);
     }
     if (privateExponent) {
         sftk_FreeAttribute(privateExponent);
     }
     if (publicExponent) {
         sftk_FreeAttribute(publicExponent);
     }
+    if (exponent1) {
+        sftk_FreeAttribute(exponent1);
+    }
+    if (exponent2) {
+        sftk_FreeAttribute(exponent2);
+    }
+    if (coefficient) {
+        sftk_FreeAttribute(coefficient);
+    }
     return rv;
 }
 
 /* Generate a low private key structure from an object */
 NSSLOWKEYPrivateKey *
 sftk_GetPrivKey(SFTKObject *object,CK_KEY_TYPE key_type, CK_RV *crvp)
 {
     NSSLOWKEYPrivateKey *priv = NULL;
 
     if (object->objclass != CKO_PRIVATE_KEY) {
@@ skipping 2661 matching lines @@
 
 
 CK_RV NSC_WaitForSlotEvent(CK_FLAGS flags, CK_SLOT_ID_PTR pSlot,
                                                          CK_VOID_PTR pReserved)
 {
     CHECK_FORK();
 
     return CKR_FUNCTION_NOT_SUPPORTED;
 }