return PR_FAILURE;
token->certList = nssList_Create(token->arena, PR_FALSE); if (!token->certList) { return PR_FAILURE; }
nssToken_LoadCerts(NSSToken *token){    PRStatus nssrv = PR_SUCCESS;    nssTokenCertSearch search;    if (!PK11_IsInternal(token->pk11slot) && PK11_IsHW(token->pk11slot)) {	/* Hardware token certs will be immediately cached, and no searches	 * will be performed on the token (the certs will be discovered by	 * cache lookups)	 */	search.callback = cache_token_cert;	search.cbarg = token;	search.cached = NULL;	search.searchType = nssTokenSearchType_TokenOnly;	token->certList = nssList_Create(token->arena, PR_FALSE);	if (!token->certList) {	    return PR_FAILURE;	}	/* ignore the rv, just work without the list */	(void)nssToken_TraverseCertificates(token, NULL, &search);	/* even if there are no certs, leave a valid list pointer should	 * any be imported.  Having the pointer will also prevent searches,	 * see below.	 */    }    return nssrv;}