Index: third_party/WebKit/Source/bindings/core/v8/serialization/V8ScriptValueDeserializer.cpp |
diff --git a/third_party/WebKit/Source/bindings/core/v8/serialization/V8ScriptValueDeserializer.cpp b/third_party/WebKit/Source/bindings/core/v8/serialization/V8ScriptValueDeserializer.cpp |
index 726030fed014917838338ca488c087a69036f1fc..516ec902c1aa37efdce1418070c8f6eb78751b06 100644 |
--- a/third_party/WebKit/Source/bindings/core/v8/serialization/V8ScriptValueDeserializer.cpp |
+++ b/third_party/WebKit/Source/bindings/core/v8/serialization/V8ScriptValueDeserializer.cpp |
@@ -54,7 +54,7 @@ size_t readVersionEnvelope(SerializedScriptValue* serializedScriptValue, |
unsigned shift = 0; |
bool hasAnotherByte; |
do { |
- if (i > length) |
+ if (i >= length) |
return 0; |
uint8_t byte = rawData[i]; |
if (LIKELY(shift < 32)) { |