[upstream] nss-3.17