Index: chrome/browser/safe_browsing/module_integrity_verifier.h |
diff --git a/chrome/browser/safe_browsing/module_integrity_verifier.h b/chrome/browser/safe_browsing/module_integrity_verifier.h |
new file mode 100644 |
index 0000000000000000000000000000000000000000..a400c9097e314a48e7971430150d472a6ba965ea |
--- /dev/null |
+++ b/chrome/browser/safe_browsing/module_integrity_verifier.h |
@@ -0,0 +1,43 @@ |
+// Copyright 2014 The Chromium Authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+#ifndef CHROME_BROWSER_SAFE_BROWSING_MODULE_INTEGRITY_VERIFIER_H_ |
+#define CHROME_BROWSER_SAFE_BROWSING_MODULE_INTEGRITY_VERIFIER_H_ |
+ |
+#include <windows.h> |
+#include <psapi.h> |
+ |
+#include "base/files/file_path.h" |
+#include "base/files/memory_mapped_file.h" |
+#include "base/scoped_native_library.h" |
+#include "base/win/pe_image.h" |
+ |
+namespace safe_browsing { |
+ |
+// This enum defines the possible module states VerifyModule can return. |
+enum ModuleState { |
+ MODULE_STATE_UNKNOWN, |
+ MODULE_STATE_UNMODIFIED, |
+ MODULE_STATE_MODIFIED, |
+}; |
+ |
+// Helper to grab the addresses and size of the code section of a PEImage. |
+// Returns two addresses: one for the dll loaded as a library, the other for the |
+// dll loaded as data. |
+bool GetCodeAddrsAndSize(const base::win::PEImage& mem_peimage, |
+ const base::win::PEImageAsData& disk_peimage, |
+ BYTE** mem_code_addr, |
+ BYTE** disk_code_addr, |
+ SIZE_T* code_size); |
+ |
+// Helper to count the number of bytes differing between two pointers. |
+int CountBytesDiffInPtr(intptr_t num_a, intptr_t num_b); |
+ |
+// Examines the code section of the given module in memory and on disk, looking |
+// for unexpected differences. |
+ModuleState VerifyModule(const wchar_t* module_name); |
+ |
+} // namespace safe_browsing |
+ |
+#endif // CHROME_BROWSER_SAFE_BROWSING_MODULE_INTEGRITY_VERIFIER_H_ |