Add a ModuleLoadAnalyzer which checks modules against a whitelist

chrome/chrome_browser.gypi

 # Copyright 2012 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 {
   'variables': {
     # All .cc, .h, .m, and .mm files under browser except for:
     # * tests and mocks.
     # * code below browser/chromeos
     # * code below browser/extensions
@@ skipping 2575 matching lines @@
       'browser/safe_browsing/incident_reporting/incident_report_uploader.cc',
       'browser/safe_browsing/incident_reporting/incident_report_uploader.h',
       'browser/safe_browsing/incident_reporting/incident_report_uploader_impl.cc',
       'browser/safe_browsing/incident_reporting/incident_report_uploader_impl.h',
       'browser/safe_browsing/incident_reporting/incident_reporting_service.cc',
       'browser/safe_browsing/incident_reporting/incident_reporting_service.h',
       'browser/safe_browsing/incident_reporting/last_download_finder.cc',
       'browser/safe_browsing/incident_reporting/last_download_finder.h',
       'browser/safe_browsing/incident_reporting/module_integrity_verifier_win.cc',
       'browser/safe_browsing/incident_reporting/module_integrity_verifier_win.h',
+      'browser/safe_browsing/incident_reporting/module_load_analyzer.cc',
+      'browser/safe_browsing/incident_reporting/module_load_analyzer.h',
+      'browser/safe_browsing/incident_reporting/module_load_analyzer_win.cc',
       'browser/safe_browsing/incident_reporting/off_domain_inclusion_detector.cc',
       'browser/safe_browsing/incident_reporting/off_domain_inclusion_detector.h',
       'browser/safe_browsing/incident_reporting/platform_state_store.cc',
       'browser/safe_browsing/incident_reporting/platform_state_store.h',
       'browser/safe_browsing/incident_reporting/platform_state_store_win.cc',
       'browser/safe_browsing/incident_reporting/preference_validation_delegate.cc',
       'browser/safe_browsing/incident_reporting/preference_validation_delegate.h',
       'browser/safe_browsing/incident_reporting/resource_request_detector.cc',
       'browser/safe_browsing/incident_reporting/resource_request_detector.h',
       'browser/safe_browsing/incident_reporting/resource_request_incident.cc',
       'browser/safe_browsing/incident_reporting/resource_request_incident.h',
       'browser/safe_browsing/incident_reporting/state_store.cc',
       'browser/safe_browsing/incident_reporting/state_store.h',
+      'browser/safe_browsing/incident_reporting/suspicious_module_incident.cc',
+      'browser/safe_browsing/incident_reporting/suspicious_module_incident.h',
       'browser/safe_browsing/incident_reporting/tracked_preference_incident.cc',
       'browser/safe_browsing/incident_reporting/tracked_preference_incident.h',
       'browser/safe_browsing/incident_reporting/variations_seed_signature_analyzer.cc',
       'browser/safe_browsing/incident_reporting/variations_seed_signature_analyzer.h',
       'browser/safe_browsing/incident_reporting/variations_seed_signature_incident.cc',
       'browser/safe_browsing/incident_reporting/variations_seed_signature_incident.h',
       'browser/safe_browsing/local_database_manager.cc',
       'browser/safe_browsing/local_database_manager.h',
       'browser/safe_browsing/path_sanitizer.cc',
       'browser/safe_browsing/path_sanitizer.h',
@@ skipping 1573 matching lines @@
             '../components/components.gyp:omnibox_browser',
             '../components/components.gyp:rlz',
             '../components/components.gyp:search_engines',
             '../rlz/rlz.gyp:rlz_lib',
           ],
         },
       ],
     }],
   ],
 }