Validate hash_sha256 checksum on .crx update.

chrome/browser/chromeos/app_mode/kiosk_external_update_validator.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_CHROMEOS_APP_MODE_KIOSK_EXTERNAL_UPDATE_VALIDATOR_H_
 #define CHROME_BROWSER_CHROMEOS_APP_MODE_KIOSK_EXTERNAL_UPDATE_VALIDATOR_H_
 
 #include <string>
 
 #include "base/files/file_path.h"
@@ skipping 23 matching lines @@
 };
 
 // Unpacks the crx file of the kiosk app and validates its signature.
 class KioskExternalUpdateValidator
     : public extensions::SandboxedUnpackerClient {
  public:
   KioskExternalUpdateValidator(
       const scoped_refptr<base::SequencedTaskRunner>& backend_task_runner,
       const std::string& app_id,
       const base::FilePath& crx_path,
+      const std::string& crx_hash,
       const base::FilePath& crx_unpack_dir,
       const base::WeakPtr<KioskExternalUpdateValidatorDelegate>& delegate);
 
   // Starts validating the external crx file.
   void Start();
 
  private:
   virtual ~KioskExternalUpdateValidator();
 
   // SandboxedUnpackerClient overrides.
   virtual void OnUnpackFailure(const base::string16& error_message) override;
   virtual void OnUnpackSuccess(const base::FilePath& temp_dir,
                                const base::FilePath& extension_dir,
                                const base::DictionaryValue* original_manifest,
                                const extensions::Extension* extension,
                                const SkBitmap& install_icon) override;
 
   // Task runner for executing file I/O tasks.
   const scoped_refptr<base::SequencedTaskRunner> backend_task_runner_;
   std::string app_id_;
 
   // The directory where the external crx file resides.
   base::FilePath crx_dir_;
+
+  // Hash sum of the crx file.
+  std::string crx_hash_;
+
   // The temporary directory used by SandBoxedUnpacker for unpacking extensions.
   const base::FilePath crx_unpack_dir_;
 
   base::WeakPtr<KioskExternalUpdateValidatorDelegate> delegate_;
 
   DISALLOW_COPY_AND_ASSIGN(KioskExternalUpdateValidator);
 };
 
 }  // namespace chromeos
 
 #endif  // CHROME_BROWSER_CHROMEOS_APP_MODE_KIOSK_EXTERNAL_UPDATE_VALIDATOR_H_