Implement anonymous, opt-in, collection of OS X binary integrity incidents.

chrome/browser/safe_browsing/incident_reporting/binary_integrity_analyzer_mac.cc

+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "chrome/browser/safe_browsing/incident_reporting/binary_integrity_analyzer.h"
+
+#include "base/base_paths.h"
+#include "base/files/file_util.h"
+#include "base/path_service.h"
+#include "chrome/browser/safe_browsing/incident_reporting/incident_receiver.h"
+#include "chrome/browser/safe_browsing/incident_reporting/osx_binary_integrity_incident.h"
+#include "chrome/browser/safe_browsing/signature_evaluator_mac.h"
+#include "chrome/common/safe_browsing/csd.pb.h"
+
+#define DEVELOPER_ID_APPLICATION_OID "field.1.2.840.113635.100.6.1.13"
+#define DEVELOPER_ID_INTERMEDIATE_OID "field.1.2.840.113635.100.6.2.6"
+
+namespace safe_browsing {
+
+std::vector<std::pair<base::FilePath, std::string>>
+GetCriticalPathsAndRequirements() {
+  // Get the path to the main executable
+  std::vector<std::pair<base::FilePath, std::string>> critical_binaries;
+  base::FilePath main_exe;
+  if (!PathService::Get(base::FILE_EXE, &main_exe))
+    NOTREACHED();
+  std::string requirement =
+      "anchor apple generic and certificate 1[" DEVELOPER_ID_INTERMEDIATE_OID
+      "] exists and certificate leaf[" DEVELOPER_ID_APPLICATION_OID
+      "] exists and certificate leaf[subject.OU]=\"EQHXZ8M8AV\" and "
+      "(identifier=\"com.google.Chrome\" or "
+      "identifier=\"com.google.Chrome.canary\")";
+  critical_binaries.push_back(std::make_pair(main_exe, requirement));
+  // TODO(kerrnel): eventually add Adobe Flash Player to this list.
+  return critical_binaries;
+}
+
+void VerifyBinaryIntegrityHelper(scoped_ptr<IncidentReceiver> incident_receiver,
+                                 const base::FilePath& path,
+                                 const std::string& requirement) {
+  base::FilePath binary_path(path);
+  if (!base::PathExists(binary_path))
+    return;
+
+  MacSignatureEvaluator evaluator(binary_path, requirement);
+  if (!evaluator.Initialize()) {
+    LOG(ERROR) << "Could not initialize mac signature evaluator";
+    return;
+  }
+
+  scoped_ptr<ClientIncidentReport_IncidentData_OSXBinaryIntegrityIncident>
+      incident(
+          new ClientIncidentReport_IncidentData_OSXBinaryIntegrityIncident());
+  if (!evaluator.PerformEvaluation(incident.get())) {
+    incident_receiver->AddIncidentForProcess(
+        make_scoped_ptr(new OSXBinaryIntegrityIncident(incident.Pass())));
+  }
+}
+
+void VerifyBinaryIntegrity(scoped_ptr<IncidentReceiver> incident_receiver) {
+  std::vector<std::pair<base::FilePath, std::string>> bundles_and_requirements =
+      GetCriticalPathsAndRequirements();
+  for (size_t i = 0; i < bundles_and_requirements.size(); i++) {

[grt (UTC plus 2), 2015/10/03 20:03:00]

  for (const auto& p : bundles_and_requirements) {

[Greg K, 2015/10/07 22:54:28]

Done.

+    const auto& p = bundles_and_requirements[i];
+    const base::FilePath& path = p.first;
+    const std::string& requirement = p.second;
+    base::TimeTicks time_before = base::TimeTicks::Now();
+    VerifyBinaryIntegrityHelper(incident_receiver.Pass(), path, requirement);

[grt (UTC plus 2), 2015/10/03 20:02:59]

don't Pass() ownership of the receiver to the helper func here since it will be
destroyed after the first call.

[Greg K, 2015/10/07 22:54:28]

Done.

+    RecordSignatureVerificationTime(i, base::TimeTicks::Now() - time_before);
+  }
+}
+
+}  // namespace