AU: Verify that the applied delta update matches the server-sent hashes.

delta_performer.h

 // Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROMEOS_PLATFORM_UPDATE_ENGINE_DELTA_PERFORMER_H__
 #define CHROMEOS_PLATFORM_UPDATE_ENGINE_DELTA_PERFORMER_H__
 
 #include <inttypes.h>
 
 #include <vector>
@@ skipping 45 matching lines @@
   // payload as well as against the update check hash and size and returns true
   // on success, false on failure. This method should be called after closing
   // the stream. Note this method skips the signed hash check if the public key
   // is unavailable; it returns false if the public key is available but the
   // delta payload doesn't include a signature. If |public_key_path| is an empty
   // string, uses the default public key path.
   bool VerifyPayload(const std::string& public_key_path,
                      const std::string& update_check_response_hash,
                      const uint64_t update_check_response_size);
 
+  // Verifies that the generated update is correct based on the hashes sent by
+  // the server. Returns true on success, false otherwise.
+  bool VerifyAppliedUpdate(const std::string& path,
+                           const std::string& kernel_path);
+
   // Converts an ordered collection of Extent objects which contain data of
   // length full_length to a comma-separated string. For each Extent, the
   // string will have the start offset and then the length in bytes.
   // The length value of the last extent in the string may be short, since
   // the full length of all extents in the string is capped to full_length.
   // Also, an extent starting at kSparseHole, appears as -1 in the string.
   // For example, if the Extents are {1, 1}, {4, 2}, {kSparseHole, 1},
   // {0, 1}, block_size is 4096, and full_length is 5 * block_size - 13,
   // the resulting string will be: "4096:4096,16384:8192,-1:4096,0:4083"
   static bool ExtentsToBsdiffPositionsString(
@@ skipping 99 matching lines @@
 
   // Signatures message blob extracted directly from the payload.
   std::vector<char> signatures_message_data_;
 
   DISALLOW_COPY_AND_ASSIGN(DeltaPerformer);
 };
 
 }  // namespace chromeos_update_engine
 
 #endif  // CHROMEOS_PLATFORM_UPDATE_ENGINE_DELTA_PERFORMER_H__