Index: net/base/crl_set.cc |
=================================================================== |
--- net/base/crl_set.cc (revision 108066) |
+++ net/base/crl_set.cc (working copy) |
@@ -410,7 +410,7 @@ |
const base::StringPiece& parent_spki) const { |
base::StringPiece serial(serial_number); |
- if (!serial.empty() && serial[0] >= 0x80) { |
+ if (!serial.empty() && (serial[0] & 0x80) != 0) { |
// This serial number is negative but the process which generates CRL sets |
// will reject any certificates with negative serial numbers as invalid. |
return UNKNOWN; |