chrome.exe --package-extension

chrome/common/extensions/extension_unpacker.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/extensions/extension_unpacker.h"
 
 #include "base/file_util.h"
 #include "base/scoped_handle.h"
 #include "base/scoped_temp_dir.h"
 #include "base/string_util.h"
@@ skipping 130 matching lines @@
   if (!val.get()) {
     SetError(error);
     return NULL;
   }
   if (!val->IsType(Value::TYPE_DICTIONARY)) {
     SetError("manifest isn't a JSON dictionary");
     return NULL;
   }
   DictionaryValue* manifest = static_cast<DictionaryValue*>(val.get());
 
-  std::string zip_hash;
-  if (!manifest->GetString(Extension::kZipHashKey, &zip_hash)) {
-    SetError("missing zip_hash key");
-    return NULL;
-  }
-  if (zip_hash.size() != kZipHashHexBytes) {
-    SetError("invalid zip_hash key");
-    return NULL;
-  }
-
-  // Read the rest of the zip file and compute a hash to compare against
-  // what the manifest claims.  Compute the hash incrementally since the
-  // zip file could be large.
-  const unsigned char* ubuf = reinterpret_cast<const unsigned char*>(buf);
-  SHA256Context ctx;
-  SHA256_Begin(&ctx);
-  while ((len = fread(buf, 1, sizeof(buf), file.get())) > 0)
-    SHA256_Update(&ctx, ubuf, len);
-  uint8 hash[32];
-  SHA256_End(&ctx, hash, NULL, sizeof(hash));
-
-  std::vector<uint8> zip_hash_bytes;
-  if (!HexStringToBytes(zip_hash, &zip_hash_bytes)) {
-    SetError("invalid zip_hash key");
-    return NULL;
-  }
-  if (zip_hash_bytes.size() != kZipHashBytes) {
-    SetError("invalid zip_hash key");
-    return NULL;
-  }
-  for (size_t i = 0; i < kZipHashBytes; ++i) {
-    if (zip_hash_bytes[i] != hash[i]) {
-      SetError("zip_hash key didn't match zip hash");
-      return NULL;
-    }
-  }
-
   // TODO(erikkay): The manifest will also contain a signature of the hash
   // (or perhaps the whole manifest) for authentication purposes.
 
   // The caller owns val (now cast to manifest).
   val.release();
   return manifest;
 }
 
 DictionaryValue* ExtensionUnpacker::ReadManifest() {
   FilePath manifest_path =
@@ skipping 118 matching lines @@
     return false;
   }
 
   decoded_images_.push_back(MakeTuple(image_bitmap, path));
   return true;
 }
 
 void ExtensionUnpacker::SetError(const std::string &error) {
   error_message_ = error;
 }