Update NSS to NSS 3.13.5 (from NSS 3.13.3).

nss/mozilla/security/nss/lib/libpkix/pkix/checker/pkix_signaturechecker.c

Index: nss/mozilla/security/nss/lib/libpkix/pkix/checker/pkix_signaturechecker.c
===================================================================
--- nss/mozilla/security/nss/lib/libpkix/pkix/checker/pkix_signaturechecker.c	(revision 142244)
+++ nss/mozilla/security/nss/lib/libpkix/pkix/checker/pkix_signaturechecker.c	(working copy)
@@ -245,7 +245,6 @@
                         certVerified = PKIX_TRUE;
                 } else {
                         certVerified = PKIX_FALSE;
-                        PKIX_DECREF(verifyFail);
                 }
         }
 
@@ -292,6 +291,7 @@
                                 plContext),
                                 PKIX_LISTGETITEMFAILED);
 
+                        PKIX_DECREF(verifyFail);
                         verifyFail = PKIX_PL_Cert_VerifySignature
                                 (cert, pKey, plContext);
 
@@ -300,7 +300,6 @@
                                 break;
                         } else {
                                 certVerified = PKIX_FALSE;
-                                PKIX_DECREF(verifyFail);
                         }
 
                         PKIX_DECREF(pKey);
@@ -309,6 +308,8 @@
 #endif
 
         if (certVerified == PKIX_FALSE) {
+                pkixErrorResult = verifyFail;
+                verifyFail = NULL;
                 PKIX_ERROR(PKIX_VALIDATIONFAILEDCERTSIGNATURECHECKING);
         }