diff --git a/mozilla/extensions/auth/nsHttpNegotiateAuth.cpp b/mozilla/extensions/auth/nsHttpNegotiateAuth.cpp
index b7404fc68f1..2b74954a43d 100644
--- a/mozilla/extensions/auth/nsHttpNegotiateAuth.cpp
+++ b/mozilla/extensions/auth/nsHttpNegotiateAuth.cpp
@@ -408,7 +408,7 @@ nsHttpNegotiateAuth::MatchesBaseURI(const nsCSubstring &matchScheme,
 
     // XXX this does not work for IPv6-literals
     const char *hostEnd = strchr(hostStart, ':');
-    if (hostEnd && hostEnd <= baseEnd) {
+    if (hostEnd && hostEnd < baseEnd) {
         // the given port must match the parsed port exactly
         int port = atoi(hostEnd + 1);
         if (matchPort != (PRInt32) port)
diff --git a/mozilla/netwerk/protocol/http/src/nsHttpNTLMAuth.cpp b/mozilla/netwerk/protocol/http/src/nsHttpNTLMAuth.cpp
index 9c25334c0b3..ff5a6427b77 100644
--- a/mozilla/netwerk/protocol/http/src/nsHttpNTLMAuth.cpp
+++ b/mozilla/netwerk/protocol/http/src/nsHttpNTLMAuth.cpp
@@ -83,7 +83,7 @@ MatchesBaseURI(const nsCSubstring &matchScheme,
 
     // XXX this does not work for IPv6-literals
     const char *hostEnd = strchr(hostStart, ':');
-    if (hostEnd && hostEnd <= baseEnd) {
+    if (hostEnd && hostEnd < baseEnd) {
         // the given port must match the parsed port exactly
         int port = atoi(hostEnd + 1);
         if (matchPort != (PRInt32) port)