Validate hash_sha256 checksum on .crx update.

extensions/browser/sandboxed_unpacker.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_EXTENSIONS_SANDBOXED_UNPACKER_H_
 #define CHROME_BROWSER_EXTENSIONS_SANDBOXED_UNPACKER_H_
 
 #include <string>
 
 #include "base/files/file_path.h"
 #include "base/files/scoped_temp_dir.h"
 #include "base/memory/ref_counted.h"
 #include "base/time/time.h"
 #include "content/public/browser/utility_process_host_client.h"
+#include "extensions/browser/crx_file_info.h"
 #include "extensions/common/manifest.h"
 
 class SkBitmap;
 
 namespace base {
 class DictionaryValue;
 class SequencedTaskRunner;
 }
 
+namespace crypto {
+class SecureHash;
+}
+
 namespace extensions {
 class Extension;
 
 class SandboxedUnpackerClient
     : public base::RefCountedThreadSafe<SandboxedUnpackerClient> {
  public:
   // temp_dir - A temporary directory containing the results of the extension
   // unpacking. The client is responsible for deleting this directory.
   //
   // extension_root - The path to the extension root inside of temp_dir.
@@ skipping 38 matching lines @@
 // long enough to receive the result of unpacking.
 //
 //
 // NOTE: This class should only be used on the file thread.
 class SandboxedUnpacker : public content::UtilityProcessHostClient {
  public:
   // Unpacks the extension in |crx_path| into a temporary directory and calls
   // |client| with the result. If |run_out_of_process| is provided, unpacking
   // is done in a sandboxed subprocess. Otherwise, it is done in-process.
   SandboxedUnpacker(
-      const base::FilePath& crx_path,
+      const CRXFileInfo& file,
       Manifest::Location location,
       int creation_flags,
       const base::FilePath& extensions_dir,
       const scoped_refptr<base::SequencedTaskRunner>& unpacker_io_task_runner,
       SandboxedUnpackerClient* client);
 
   // Start unpacking the extension. The client is called with the results.
   void Start();
 
  private:
@@ skipping 48 matching lines @@
     ERROR_SAVING_THEME_IMAGE,
     ABORTED_DUE_TO_SHUTDOWN,
 
     // SandboxedUnpacker::RewriteCatalogFiles()
     COULD_NOT_READ_CATALOG_DATA_FROM_DISK,
     INVALID_CATALOG_DATA,
     INVALID_PATH_FOR_CATALOG,
     ERROR_SERIALIZING_CATALOG,
     ERROR_SAVING_CATALOG,
 
+    // SandboxedUnpacker::ValidateSignature()
+    CRX_HASH_VERIFICATION_FAILED,
+
     NUM_FAILURE_REASONS
   };
 
   friend class ProcessHostClient;
   friend class SandboxedUnpackerTest;
 
   ~SandboxedUnpacker() override;
 
   // Set |temp_dir_| as a temporary directory to unpack the extension in.
   // Return true on success.
   virtual bool CreateTempDirectory();
 
+  // Finalizes hash calculation and checks the result against the expected
+  // package hash. In case of mismatch, depending on the command-line option,
+  // we will either fail installation, or just update histograms.
+  bool FinalizeHash(scoped_ptr<crypto::SecureHash>& hash);
+
   // Validates the signature of the extension and extract the key to
   // |public_key_|. Returns true if the signature validates, false otherwise.
   //
   // NOTE: Having this method here is a bit ugly. This code should really live
   // in extensions::Unpacker as it is not specific to sandboxed unpacking. It
   // was put here because we cannot run windows crypto code in the sandbox. But
   // we could still have this method statically on extensions::Unpacker so that
   // code just for unpacking is there and code just for sandboxing of unpacking
   // is here.
   bool ValidateSignature();
@@ skipping 22 matching lines @@
   // Reports error and returns false if it fails.
   bool RewriteImageFiles(SkBitmap* install_icon);
   bool RewriteCatalogFiles();
 
   // Cleans up temp directory artifacts.
   void Cleanup();
 
   // The path to the CRX to unpack.
   base::FilePath crx_path_;
 
+  // The package hash that was reported from the Web Store.
+  std::string package_hash_;
+
+  // Whether we need to check the .crx hash sum.
+  bool check_crx_hash_;
+
   // Our client.
   scoped_refptr<SandboxedUnpackerClient> client_;
 
   // The Extensions directory inside the profile.
   base::FilePath extensions_dir_;
 
   // A temporary directory to use for unpacking.
   base::ScopedTempDir temp_dir_;
 
   // The root directory of the unpacked extension. This is a child of temp_dir_.
@@ skipping 22 matching lines @@
   // when calling Extenion::Create() by the crx installer.
   int creation_flags_;
 
   // Sequenced task runner where file I/O operations will be performed at.
   scoped_refptr<base::SequencedTaskRunner> unpacker_io_task_runner_;
 };
 
 }  // namespace extensions
 
 #endif  // CHROME_BROWSER_EXTENSIONS_SANDBOXED_UNPACKER_H_