The incident reporting service now calls VerifyModule.

chrome/browser/safe_browsing/environment_data_collection_win.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/safe_browsing/environment_data_collection_win.h"
 
 #include <windows.h>
 #include <set>
 
 #include "base/i18n/case_conversion.h"
 #include "base/strings/string_util.h"
 #include "base/strings/utf_string_conversions.h"
 #include "base/win/registry.h"
 #include "chrome/browser/install_verification/win/module_info.h"
 #include "chrome/browser/install_verification/win/module_verification_common.h"
 #include "chrome/browser/net/service_providers_win.h"
+#include "chrome/browser/safe_browsing/module_integrity_verifier_win.h"
 #include "chrome/browser/safe_browsing/path_sanitizer.h"
 #include "chrome/common/safe_browsing/csd.pb.h"
 #include "chrome_elf/chrome_elf_constants.h"
 
 namespace safe_browsing {
 
 namespace {
 
 // Helper function for expanding all environment variables in |path|.
 std::wstring ExpandEnvironmentVariables(const std::wstring& path) {
@@ skipping 68 matching lines @@
   PathSanitizer path_sanitizer;
   base::win::RegistryValueIterator iter(HKEY_CURRENT_USER,
                                         blacklist::kRegistryFinchListPath);
   for (; iter.Valid(); ++iter) {
     base::FilePath dll_name(iter.Value());
     path_sanitizer.StripHomeDirectory(&dll_name);
     process->add_blacklisted_dll(dll_name.AsUTF8Unsafe());
   }
 }
 
+void RecordModuleVerificationData(
+    const wchar_t* const* modules_to_verify,
+    ClientIncidentReport_EnvironmentData_Process* process) {
+  for (; *modules_to_verify; ++modules_to_verify) {
+    std::set<std::string> modified_exports;
+    int modified = VerifyModule(*modules_to_verify, &modified_exports);
+
+    ClientIncidentReport_EnvironmentData_Process_ModuleState* module_state =
+        process->add_module_state();
+
+    module_state->set_name(base::WideToUTF8(std::wstring(*modules_to_verify)));
+    module_state->set_modified_state(
+        static_cast<ClientIncidentReport_EnvironmentData_Process_ModifiedState>(
+            modified));
+    for (std::set<std::string>::iterator it = modified_exports.begin();
+         it != modified_exports.end();
+         ++it) {
+      module_state->add_modified_export(*it);
+    }
+  }
+}
+
 void CollectPlatformProcessData(
     ClientIncidentReport_EnvironmentData_Process* process) {
   CollectDlls(process);
   RecordLspFeature(process);
   CollectDllBlacklistData(process);
+  RecordModuleVerificationData(modules_to_verify, process);

[grt (UTC plus 2), 2014/08/06 01:28:10]

i think it makes sense to put:
const wchar_t* const kModulesToVerify[] = {
  ...
};
in the unnamed namespace in this file, and pass kModulesToVerify to
RecordModuleVerificationData here.

[grt (UTC plus 2), 2014/08/06 01:28:10]

nit: Collect rather than Record. "LspFeature" is an exception since it modifies
existing data in the pb.

[krstnmnlsn, 2014/08/06 21:55:11]

Done.

[krstnmnlsn, 2014/08/06 21:55:11]

Done.

 }
 
 }  // namespace safe_browsing