Check that the PNaCl cache hash is truly derived from the bitcode content.

ppapi/native_client/src/trusted/plugin/pnacl_coordinator.h

Index: ppapi/native_client/src/trusted/plugin/pnacl_coordinator.h
diff --git a/ppapi/native_client/src/trusted/plugin/pnacl_coordinator.h b/ppapi/native_client/src/trusted/plugin/pnacl_coordinator.h
index 784b8c7edbd0f5892c6c22a16f318914099e352c..f2b2d548fd3372b747bf992e6d524247c7d12eb9 100644
--- a/ppapi/native_client/src/trusted/plugin/pnacl_coordinator.h
+++ b/ppapi/native_client/src/trusted/plugin/pnacl_coordinator.h
@@ -26,6 +26,7 @@
 #include "native_client/src/trusted/plugin/pnacl_resources.h"
 
 #include "ppapi/c/pp_file_info.h"
+#include "ppapi/c/private/ppb_nacl_hash_private.h"
 #include "ppapi/c/trusted/ppb_file_io_trusted.h"
 #include "ppapi/cpp/completion_callback.h"
 #include "ppapi/cpp/file_io.h"
@@ -181,6 +182,8 @@ class PnaclCoordinator: public CallbackSource<FileStreamData> {
   // Invoked when translation is finished.
   void TranslateFinished(int32_t pp_error);
 
+  bool BitcodeHashMatchesContents();
+
   // If the cache is enabled, open a cache file for write, then copy
   // the nexe data from temp_nexe_file_ to> cached_nexe_file_.
   // Once the copy is done, we commit it to the cache by renaming the
@@ -269,6 +272,10 @@ class PnaclCoordinator: public CallbackSource<FileStreamData> {
   // Keep this last in declaration order to ensure the other variables
   // haven't been destroyed yet when its destructor runs.
   nacl::scoped_ptr<PnaclTranslateThread> translate_thread_;
+
+  // Interface and state for bitcode hash verification.
+  const PPB_NaCl_Hash_Private* nacl_hash_private_interface_;
+  void* bitcode_hash_verifier_;
 };
 
 //----------------------------------------------------------------------