Implement crypto signature verification routines using OpenSSL.

extensions/browser/api/cast_channel/cast_auth_ica.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "extensions/browser/api/cast_channel/cast_auth_ica.h"
 
 #include "base/base64.h"
 #include "base/lazy_instance.h"
 #include "crypto/signature_verifier.h"
 #include "extensions/browser/api/cast_channel/cast_auth_util.h"
@@ skipping 668 matching lines @@
   if (!VerifySignature(decoded_signature, decoded_keys))
     return false;
 
   return g_authority_keys_store.Get().Load(decoded_keys);
 }
 
 base::StringPiece GetTrustedICAPublicKey(const base::StringPiece& data) {
   AuthorityKeyStore& authority_keys_store = g_authority_keys_store.Get();
   scoped_refptr<net::X509Certificate> ica_cert =
       net::X509Certificate::CreateFromBytes(data.data(), data.size());
+  if (!ica_cert.get()) {
+    LOG(ERROR) << "Invalid ICA certificate.";
+    return "";
+  }
   return authority_keys_store.GetICAPublicKeyFromFingerprint(
       net::X509Certificate::CalculateFingerprint256(
           ica_cert->os_cert_handle()));
 }
 
 base::StringPiece GetDefaultTrustedICAPublicKey() {
   AuthorityKeyStore& authority_keys_store = g_authority_keys_store.Get();
   return authority_keys_store.GetDefaultICAPublicKey();
 }
 
 }  // namespace cast_channel
 }  // namespace core_api
 }  // namespace extensions