Certificate Transparency: Discard entries pending auditing on network change

components/certificate_transparency/single_tree_tracker.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/certificate_transparency/single_tree_tracker.h"
 
 #include <algorithm>
 #include <iterator>
 #include <list>
 #include <utility>
@@ skipping 203 matching lines @@
 
 SingleTreeTracker::SingleTreeTracker(
     scoped_refptr<const net::CTLogVerifier> ct_log,
     LogDnsClient* dns_client)
     : ct_log_(std::move(ct_log)),
       checked_entries_(kCheckedEntriesCacheSize),
       dns_client_(dns_client),
       weak_factory_(this) {
   memory_pressure_listener_.reset(new base::MemoryPressureListener(base::Bind(
       &SingleTreeTracker::OnMemoryPressure, base::Unretained(this))));
+  net::NetworkChangeNotifier::AddNetworkChangeObserver(this);
 }
 
-SingleTreeTracker::~SingleTreeTracker() {}
+SingleTreeTracker::~SingleTreeTracker() {
+  net::NetworkChangeNotifier::RemoveNetworkChangeObserver(this);
+}
 
 void SingleTreeTracker::OnSCTVerified(net::X509Certificate* cert,
                                       const SignedCertificateTimestamp* sct) {
   DCHECK_EQ(ct_log_->key_id(), sct->log_id);
 
   EntryToAudit entry(sct->timestamp);
   if (!GetLogEntryLeafHash(cert, sct, &entry.leaf_hash))
     return;
 
   // Avoid queueing multiple instances of the same entry.
@@ skipping 82 matching lines @@
     DCHECK_EQ(curr_entry->second.state, PENDING_NEWER_STH);
     curr_entry->second.state = PENDING_INCLUSION_PROOF_REQUEST;
   }
 
   if (auditable_entries_begin == auditable_entries_end)
     return;
 
   ProcessPendingEntries();
 }
 
+void SingleTreeTracker::OnNetworkChanged(
+    net::NetworkChangeNotifier::ConnectionType type) {
+  pending_entries_.clear();
+}
+
 SingleTreeTracker::SCTInclusionStatus
 SingleTreeTracker::GetLogEntryInclusionStatus(
     net::X509Certificate* cert,
     const SignedCertificateTimestamp* sct) {
   EntryToAudit entry(sct->timestamp);
   if (!GetLogEntryLeafHash(cert, sct, &entry.leaf_hash))
     return SCT_NOT_OBSERVED;
   return GetAuditedEntryInclusionStatus(entry);
 }
 
@@ skipping 110 matching lines @@
     case base::MemoryPressureListener::MEMORY_PRESSURE_LEVEL_CRITICAL:
       pending_entries_.clear();
     // Fall through to clearing the other cache.
     case base::MemoryPressureListener::MEMORY_PRESSURE_LEVEL_MODERATE:
       checked_entries_.Clear();
       break;
   }
 }
 
 }  // namespace certificate_transparency