Convert SignedCertificateClass to be ref_counted, and add an SCTStore in which to store them. Add S…

net/cert/single_log_ct_verifier.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/single_log_ct_verifier.h"
 
 #include "net/base/net_errors.h"
 #include "net/base/net_log.h"
 #include "net/cert/ct_log_verifier.h"
 #include "net/cert/ct_objects_extractor.h"
@@ skipping 52 matching lines @@
   base::StringPiece temp(encoded_sct_list);
   std::vector<base::StringPiece> sct_list;
 
   if (!ct::DecodeSCTList(&temp, &sct_list))
     return false;
 
   bool verified = false;
   for (std::vector<base::StringPiece>::const_iterator it = sct_list.begin();
        it != sct_list.end(); ++it) {
     base::StringPiece temp_sct(*it);
-    ct::SignedCertificateTimestamp decoded_sct;
+    scoped_refptr<ct::SignedCertificateTimestamp> decoded_sct;
     if (!DecodeSignedCertificateTimestamp(&temp_sct, &decoded_sct)) {
       // XXX(rsleevi): Should we really just skip over bad SCTs?
       continue;
     }
     // Assume this SCT is untrusted until proven otherwise.
     result->unverified_scts.push_back(decoded_sct);
 
-    if (!log_->Verify(expected_entry, decoded_sct)) {
+    if (!log_->Verify(expected_entry, *decoded_sct.get())) {
       DVLOG(1) << "Unable to verify SCT signature.";
       continue;
     }
 
-    if (decoded_sct.timestamp + base::TimeDelta::FromSeconds(1) >
+    if (decoded_sct->timestamp + base::TimeDelta::FromSeconds(1) >
         base::Time::Now()) {
       DVLOG(1) << "SCT is from the future!";
       continue;
     }
 
     // Proven otherwise - remove.
     result->unverified_scts.pop_back();
     result->verified_scts.push_back(decoded_sct);
     verified = true;
   }
 
   return verified;
 }
 
 }  // namespace net