Record Code Signature of Downloaded DMG files

chrome/utility/safe_browsing/mac/dmg_analyzer.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/utility/safe_browsing/mac/dmg_analyzer.h"
 
 #include <stddef.h>
 #include <stdint.h>
 
 #include <memory>
@@ skipping 108 matching lines @@
 
 void AnalyzeDMGFile(base::File dmg_file, ArchiveAnalyzerResults* results) {
   MachOFeatureExtractor feature_extractor;
   results->success = false;
 
   FileReadStream read_stream(dmg_file.GetPlatformFile());
   DMGIterator iterator(&read_stream);
   if (!iterator.Open())
     return;
 
+  results->signature_blob = iterator.GetCodeSignature();
+
   while (iterator.Next()) {
     std::unique_ptr<ReadStream> stream = iterator.GetReadStream();
     if (!stream || !feature_extractor.IsMachO(stream.get()))
       continue;
 
     ClientDownloadRequest_ArchivedBinary* binary =
         results->archived_binary.Add();
     binary->set_file_basename(base::UTF16ToUTF8(iterator.GetPath()));
 
     if (feature_extractor.ExtractFeatures(stream.get(), binary)) {
       binary->set_download_type(
           ClientDownloadRequest_DownloadType_MAC_EXECUTABLE);
       results->has_executable = true;
     } else {
       results->archived_binary.RemoveLast();
     }
   }
 
   results->success = true;
 }
 
 }  // namespace dmg
 }  // namespace safe_browsing