if (!offset || (name->data[offset - 1] == '.') + (constraint->data[0] == '.') == 1) return SECSuccess; return SECFailure;
return SECSuccess;
compareDNSN2C(const SECItem *name, const SECItem *constraint){    int offset;    /* The spec is silent on intepreting zero-length constraints.    ** We interpret them as matching all DNSnames.    */    if (!constraint->len)        return SECSuccess;    if (name->len < constraint->len)        return SECFailure;    offset = name->len - constraint->len;    if (PL_strncasecmp(name->data + offset, constraint->data, constraint->len))        return SECFailure;    if (!offset ||         (name->data[offset - 1] == '.') + (constraint->data[0] == '.') == 1)	return SECSuccess;    return SECFailure;}