Fix firefox test

Author: aidangarske

src/internal.c

@@ -8156,6 +8156,9 @@ static WP11_Object* wp11_Session_FindNext(WP11_Session* session, int onToken,
         }
    #endif
 
+        /* Note: this CKA_PRIVATE check is intentionally active in NSS mode.
+         * NSS accesses private objects by handle (via WP11_Object_Find) rather
+         * than discovering them through C_FindObjects enumeration. */
         if ((ret->opFlag & WP11_FLAG_PRIVATE) == WP11_FLAG_PRIVATE) {
             if (!onToken)
                 WP11_Lock_LockRO(&session->slot->token.lock);
@@ -9174,7 +9177,10 @@ int WP11_Object_Find(WP11_Session* session, CK_OBJECT_HANDLE objHandle,
     }
 
     if (ret == 0 && obj != NULL && (obj->handle == objHandle)) {
-        /* Enforce CKA_PRIVATE: reject private objects from public sessions */
+#ifndef WOLFPKCS11_NSS
+        /* Enforce CKA_PRIVATE: reject private objects from public sessions.
+         * Skipped in NSS mode because NSS operates as the internal crypto
+         * module without calling C_Login. */
         if ((obj->opFlag & WP11_FLAG_PRIVATE) == WP11_FLAG_PRIVATE) {
             int loginState;
             WP11_Lock_LockRO(&session->slot->lock);
@@ -9186,6 +9192,7 @@ int WP11_Object_Find(WP11_Session* session, CK_OBJECT_HANDLE objHandle,
             }
             WP11_Lock_UnlockRO(&session->slot->lock);
         }
+#endif
         if (ret == 0)
             *object = obj;
     }

tests/pkcs11test.c

@@ -16675,6 +16675,7 @@ static CK_RV test_private_object_access(void* args)
     return ret;
 }
 
+#ifndef WOLFPKCS11_NSS
 static CK_RV test_private_object_handle_access(void* args)
 {
     CK_SESSION_HANDLE session = *(CK_SESSION_HANDLE*)args;
@@ -16735,6 +16736,7 @@ static CK_RV test_private_object_handle_access(void* args)
 
     return ret;
 }
+#endif /* !WOLFPKCS11_NSS */
 
 /* C_GetAttributeValue must process all attributes in the template even when one
  * returns an error, setting ulValueLen to (CK_ULONG)-1 for invalid types and
@@ -17269,7 +17271,9 @@ static TEST_FUNC testFunc[] = {
     PKCS11TEST_FUNC_SESS_DECL(test_get_attr_value_all_processed),
     PKCS11TEST_FUNC_SESS_DECL(test_find_objects),
     PKCS11TEST_FUNC_SESS_DECL(test_private_object_access),
+#ifndef WOLFPKCS11_NSS
     PKCS11TEST_FUNC_SESS_DECL(test_private_object_handle_access),
+#endif
     PKCS11TEST_FUNC_SESS_DECL(test_encrypt_decrypt),
 #ifndef NO_AES
     PKCS11TEST_FUNC_SESS_DECL(test_encrypt_decrypt_op_not_supported),