if (rv = SECSuccess) {
if (rv == SECSuccess) {
pk11_TLSPRFVerify(TLSPRFContext *cx,                   unsigned char *sig, 		/* input, for comparison. */		  unsigned int   sigLen,	/* length of sig.         */		  unsigned char *hash, 		/* data to be verified.   */		  unsigned int   hashLen)	/* size of hash data.     */{    unsigned char * tmp    = (unsigned char *)PORT_Alloc(sigLen);    unsigned int    tmpLen = sigLen;    SECStatus       rv;    if (!tmp)    	return SECFailure;    if (hashLen) {    	/* hashLen is non-zero when the user does a one-step verify.	** In this case, none of the data has been input yet.	*/    	pk11_TLSPRFHashUpdate(cx, hash, hashLen);    }    rv = pk11_TLSPRFUpdate(cx, tmp, &tmpLen, sigLen, NULL, 0);    if (rv = SECSuccess) {    	rv = (SECStatus)(1 - !PORT_Memcmp(tmp, sig, sigLen));    }    PORT_ZFree(tmp, sigLen);    return rv;}