- * security descriptors, or -1. Note: in verify_inode(), called
- * whenever a WIM image is loaded, out-of-bounds indices are set to -1,
- * so the extraction code does not need to do bounds checks. */
+ * security descriptors, or -1. Note: when a WIM image is loaded,
+ * wimlib sets out-of-bounds indices and values less than -1 in this
+ * field to -1. So the extraction code need not do an upper bound check
+ * after checking for -1 (or equivalently < 0). */