mozilla/browserid — comment on commit 2a342400d29a59dd6d20502bafce72fcc94d5c60
File: lib/verifier/certassertion.js line 135
By benadida:

this code is doing the right thing, but the variable naming and the comment appear to be off. This function is only called once with the root issuer of the chain, not each time with each certificate in the chain. So ultimateIssuer should probably be rootIssuer, and you should expect it to be set precisely once (this function will be called exactly once.)