Add a ModuleLoadAnalyzer which checks modules against a whitelist

chrome/browser/safe_browsing/incident_reporting/module_load_analyzer.cc

Index: chrome/browser/safe_browsing/incident_reporting/module_load_analyzer.cc
diff --git a/chrome/browser/safe_browsing/incident_reporting/module_load_analyzer.cc b/chrome/browser/safe_browsing/incident_reporting/module_load_analyzer.cc
new file mode 100644
index 0000000000000000000000000000000000000000..ee8d74832231de083247323fc84e6d407f8817a6
--- /dev/null
+++ b/chrome/browser/safe_browsing/incident_reporting/module_load_analyzer.cc
@@ -0,0 +1,44 @@
+// Copyright 2016 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "chrome/browser/safe_browsing/incident_reporting/module_load_analyzer.h"
+
+#include "build/build_config.h"
+#include "chrome/browser/browser_process.h"
+#include "chrome/browser/safe_browsing/incident_reporting/incident_receiver.h"
+#include "chrome/browser/safe_browsing/safe_browsing_service.h"
+#include "components/safe_browsing_db/database_manager.h"
+
+namespace safe_browsing {
+
+#if defined(OS_WIN)
+// Enables analysis and reporting of suspicious modules loaded in the process.
+extern const base::Feature kIncidentReportingModuleLoadAnalysis{
+    "IncidentReportingModuleLoadAnalysis", base::FEATURE_DISABLED_BY_DEFAULT};
+#endif
+
+void RegisterModuleLoadAnalysis(
+    const scoped_refptr<SafeBrowsingDatabaseManager>& database_manager) {
+#if defined(OS_WIN)
+  DCHECK(database_manager);
+  if (base::FeatureList::IsEnabled(kIncidentReportingModuleLoadAnalysis)) {
+    scoped_refptr<SafeBrowsingService> safe_browsing_service(
+        g_browser_process->safe_browsing_service());
+
+    if (safe_browsing_service) {
+      safe_browsing_service
+          ->RegisterExtendedReportingOnlyDelayedAnalysisCallback(

[grt (UTC plus 2), 2016/02/15 16:46:50]

did git cl format put the -> on the second line? looks odd to me...

[proberge, 2016/02/16 16:56:22]

Yep

+              base::Bind(&VerifyModuleLoadState, database_manager));
+    }
+  }
+#endif
+}
+
+#if !defined(OS_WIN)
+void VerifyModuleLoadState(
+    const scoped_refptr<SafeBrowsingDatabaseManager>& database_manager,
+    scoped_ptr<IncidentReceiver> incident_receiver) {}
+#endif  // !defined(OS_WIN)
+
+}  // namespace safe_browsing