Certificate Transparency: Start tracking logs' state

components/certificate_transparency/tree_state_tracker.cc

Index: components/certificate_transparency/tree_state_tracker.cc
diff --git a/components/certificate_transparency/tree_state_tracker.cc b/components/certificate_transparency/tree_state_tracker.cc
new file mode 100644
index 0000000000000000000000000000000000000000..053ec92fc5fcbdd0874ffffc2139fecd2b77fc00
--- /dev/null
+++ b/components/certificate_transparency/tree_state_tracker.cc
@@ -0,0 +1,48 @@
+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "components/certificate_transparency/tree_state_tracker.h"
+
+#include "components/certificate_transparency/single_tree_tracker.h"
+#include "net/cert/ct_log_verifier.h"
+#include "net/cert/signed_certificate_timestamp.h"
+#include "net/cert/signed_tree_head.h"
+#include "net/cert/x509_certificate.h"
+
+using net::X509Certificate;
+using net::CTLogVerifier;
+using net::ct::SignedCertificateTimestamp;
+using net::ct::SignedTreeHead;
+
+namespace certificate_transparency {
+
+TreeStateTracker::TreeStateTracker(
+    std::vector<scoped_refptr<const CTLogVerifier>> ct_logs) {
+  for (auto& log : ct_logs)
+    tree_trackers_[log->key_id()].reset(new SingleTreeTracker(log));

[Eran Messeri, 2016/05/16 14:44:39]

Note I am *not* calling std::move here as I use the log instance for the
key_id() call. Since (as far as I understand) evaluation order of these
expressions is unspecified, I shouldn't std::move(log) into the
SingleTreeTracker constructor.

+}
+
+TreeStateTracker::~TreeStateTracker() {}
+
+void TreeStateTracker::OnSCTVerified(X509Certificate* cert,
+                                     const SignedCertificateTimestamp* sct) {
+  auto it = tree_trackers_.find(sct->log_id);
+  // Ensure the SCT is from a known log.
+  DCHECK(it != tree_trackers_.end());
+
+  it->second->OnSCTVerified(cert, sct);
+}
+
+void TreeStateTracker::NewSTHObserved(const SignedTreeHead& sth) {
+  auto it = tree_trackers_.find(sth.log_id);
+  // Is the STH from a known log? Since STHs provided via the
+  // component updater can be for logs not yet recognized older clients
+  // return, rather than DCHECK.
+  if (it == tree_trackers_.end())
+    return;
+
+  it->second->NewSTHObserved(sth);
+}
+
+}  // namespace certificate_transparency