Downgrade lock icon for broken-HTTPS subresources

content/browser/loader/resource_loader.cc

Index: content/browser/loader/resource_loader.cc
diff --git a/content/browser/loader/resource_loader.cc b/content/browser/loader/resource_loader.cc
index 854c0adde9149c719e6717d1ef8764cdb641933d..a3785f2237b0df99c5283f69a1cfcc406f9b43bc 100644
--- a/content/browser/loader/resource_loader.cc
+++ b/content/browser/loader/resource_loader.cc
@@ -113,6 +113,9 @@ void PopulateResourceResponse(ResourceRequestInfoImpl* info,
     GetSSLStatusForRequest(request->url(), request->ssl_info(),
                            info->GetChildID(), &ssl_status);
     response->head.security_info = SerializeSecurityInfo(ssl_status);

[jww, 2015/11/20 01:25:08]

nit: This doesn't seem like a great name; it's really more like
has_major_certificate_errors (or something like that).

[estark, 2015/11/23 23:40:24]

Done.

+    response->head.has_certificate_errors =
+        net::IsCertStatusError(ssl_status.cert_status) &&
+        !net::IsCertStatusMinorError(ssl_status.cert_status);
   } else {
     // We should not have any SSL state.
     DCHECK(!request->ssl_info().cert_status);