Chromium Code Reviews| Index: chrome/browser/safe_browsing/module_integrity_verifier_win.h |
| diff --git a/chrome/browser/safe_browsing/module_integrity_verifier_win.h b/chrome/browser/safe_browsing/module_integrity_verifier_win.h |
| new file mode 100644 |
| index 0000000000000000000000000000000000000000..2cc2ad18ad6308b7a3914069fd711fdbb547e8ff |
| --- /dev/null |
| +++ b/chrome/browser/safe_browsing/module_integrity_verifier_win.h |
| @@ -0,0 +1,45 @@ |
| +// Copyright 2014 The Chromium Authors. All rights reserved. |
| +// Use of this source code is governed by a BSD-style license that can be |
| +// found in the LICENSE file. |
| + |
| +#ifndef CHROME_BROWSER_SAFE_BROWSING_MODULE_INTEGRITY_VERIFIER_WIN_H_ |
| +#define CHROME_BROWSER_SAFE_BROWSING_MODULE_INTEGRITY_VERIFIER_WIN_H_ |
| + |
| +#include <stdint.h> |
| + |
| +#include <set> |
|
grt (UTC plus 2)
2014/08/05 15:51:56
#include <string>
krstnmnlsn
2014/08/05 19:17:49
Done.
|
| + |
| +namespace base { |
| +namespace win { |
| +class PEImage; |
| +class PEImageAsData; |
| +} // namespace win |
| +} // namespace base |
| + |
| +namespace safe_browsing { |
| + |
| +// This enum defines the possible module states VerifyModule can return. |
| +enum ModuleState { |
| + MODULE_STATE_UNKNOWN, |
| + MODULE_STATE_UNMODIFIED, |
| + MODULE_STATE_MODIFIED, |
| +}; |
| + |
| +// Helper to grab the addresses and size of the code section of a PEImage. |
| +// Returns two addresses: one for the dll loaded as a library, the other for the |
| +// dll loaded as data. |
| +bool GetCodeAddrsAndSize(const base::win::PEImage& mem_peimage, |
| + const base::win::PEImageAsData& disk_peimage, |
| + uint8_t** mem_code_addr, |
| + uint8_t** disk_code_addr, |
| + uint32_t* code_size); |
| + |
| +// Examines the code section of the given module in memory and on disk, looking |
| +// for unexpected differences. Returns a ModuleState and and a set of the |
| +// possibly modified exports. |
| +ModuleState VerifyModule(const wchar_t* module_name, |
| + std::set<std::string>* modified_exports); |
| + |
| +} // namespace safe_browsing |
| + |
| +#endif // CHROME_BROWSER_SAFE_BROWSING_MODULE_INTEGRITY_VERIFIER_WIN_H_ |