Remove CPEPrefix from net/third_party/nss
net/third_party/nss is not a vendored dependency. Rather it is a single
single function containing a while loop that was, historically, derived
from a corresponding function in NSS. There is virtually zero chance
that any NSS CVE applies to this code, and we will never update the
version tag associated with it.
The only remaining connection to NSS is the high-level while loop
structure, and the call to CERT_FindCertByName(), a public NSS API.
To avoid flurries of false positives, from Chromium and all the copies
downstream, remove CPEPrefix.
Reviewed-by: Adrian Taylor <email@example.com>
Reviewed-by: Ryan Sleevi <firstname.lastname@example.org>
Commit-Queue: David Benjamin <email@example.com>
1 file changed