Added incident report for variations seed signature mismatch.

chrome/browser/metrics/variations/variations_seed_store_unittest.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/metrics/variations/variations_seed_store.h"
 
 #include "base/base64.h"
 #include "base/prefs/testing_pref_service.h"
 #include "base/sha1.h"
 #include "base/strings/string_number_conversions.h"
@@ skipping 108 matching lines @@
   EXPECT_FALSE(seed_store.LoadSeed(&loaded_seed));
   EXPECT_TRUE(PrefHasDefaultValue(prefs, prefs::kVariationsSeed));
   EXPECT_TRUE(PrefHasDefaultValue(prefs, prefs::kVariationsSeedDate));
   EXPECT_TRUE(PrefHasDefaultValue(prefs, prefs::kVariationsSeedSignature));
 
   // Check that having no seed in prefs results in a return value of false.
   prefs.ClearPref(prefs::kVariationsSeed);
   EXPECT_FALSE(seed_store.LoadSeed(&loaded_seed));
 }
 
+TEST(VariationsSeedStoreTest, GetInvalidSignature) {
+  const variations::VariationsSeed seed = CreateTestSeed();
+  std::string seed_hash;
+  const std::string base64_seed = SerializeSeedBase64(seed, &seed_hash);
+
+  TestingPrefServiceSimple prefs;
+  VariationsSeedStore::RegisterPrefs(prefs.registry());
+  prefs.SetString(prefs::kVariationsSeed, base64_seed);
+
+  // The below seed and signature pair were generated using the server's
+  // private key.
+  const std::string base64_seed_data =
+      "CigxZDI5NDY0ZmIzZDc4ZmYxNTU2ZTViNTUxYzY0NDdjYmM3NGU1ZmQwEr0BCh9VTUEtVW5p"
+      "Zm9ybWl0eS1UcmlhbC0xMC1QZXJjZW50GICckqUFOAFCB2RlZmF1bHRKCwoHZGVmYXVsdBAB"
+      "SgwKCGdyb3VwXzAxEAFKDAoIZ3JvdXBfMDIQAUoMCghncm91cF8wMxABSgwKCGdyb3VwXzA0"
+      "EAFKDAoIZ3JvdXBfMDUQAUoMCghncm91cF8wNhABSgwKCGdyb3VwXzA3EAFKDAoIZ3JvdXBf"
+      "MDgQAUoMCghncm91cF8wORAB";
+  const std::string base64_seed_signature =
+      "MEQCIDD1IVxjzWYncun+9IGzqYjZvqxxujQEayJULTlbTGA/AiAr0oVmEgVUQZBYq5VLOSvy"
+      "96JkMYgzTkHPwbv7K/CmgA==";
+  const std::string base64_seed_signature_invalid =
+      "AEQCIDD1IVxjzWYncun+9IGzqYjZvqxxujQEayJULTlbTGA/AiAr0oVmEgVUQZBYq5VLOSvy"
+      "96JkMYgzTkHPwbv7K/CmgA==";
+
+  // Set seed and valid signature in prefs.
+  prefs.SetString(prefs::kVariationsSeed, base64_seed_data);
+  prefs.SetString(prefs::kVariationsSeedSignature, base64_seed_signature);
+
+  VariationsSeedStore seed_store(&prefs);
+  variations::VariationsSeed loaded_seed;
+  seed_store.LoadSeed(&loaded_seed);
+  std::string invalid_signature = seed_store.GetInvalidSignature();
+  // Valid signature so we get an empty string.
+  EXPECT_EQ(std::string(), invalid_signature);
+
+  prefs.SetString(prefs::kVariationsSeedSignature,
+                  base64_seed_signature_invalid);
+  seed_store.LoadSeed(&loaded_seed);
+  // Invalid signature, so we should get the signature itself, except on mobile
+  // where we should get an empty string because verification is not enabled.
+  invalid_signature = seed_store.GetInvalidSignature();
+#if defined(OS_IOS) || defined(OS_ANDROID)
+  EXPECT_EQ(std::string(), invalid_signature);
+#else
+  EXPECT_EQ(base64_seed_signature_invalid, invalid_signature);
+#endif
+
+  prefs.SetString(prefs::kVariationsSeedSignature, std::string());
+  seed_store.LoadSeed(&loaded_seed);
+  invalid_signature = seed_store.GetInvalidSignature();
+  // Empty signature, not considered invalid.
+  EXPECT_EQ(std::string(), invalid_signature);
+}
+
 TEST(VariationsSeedStoreTest, StoreSeedData) {
   const variations::VariationsSeed seed = CreateTestSeed();
   const std::string serialized_seed = SerializeSeed(seed);
 
   TestingPrefServiceSimple prefs;
   VariationsSeedStore::RegisterPrefs(prefs.registry());
 
   TestVariationsSeedStore seed_store(&prefs);
 
   EXPECT_TRUE(seed_store.StoreSeedForTesting(serialized_seed));
@@ skipping 76 matching lines @@
             seed_store.VerifySeedSignature(seed_data, base64_seed_data));
 #endif
 
   // Using a different seed should not match the signature.
   seed_data[0] = 'x';
   EXPECT_EQ(VariationsSeedStore::VARIATIONS_SEED_SIGNATURE_INVALID_SEED,
             seed_store.VerifySeedSignature(seed_data, base64_seed_signature));
 }
 
 }  // namespace chrome_variations