Validate hash_sha256 checksum on .crx update.

chrome/browser/extensions/sandboxed_unpacker.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_EXTENSIONS_SANDBOXED_UNPACKER_H_
 #define CHROME_BROWSER_EXTENSIONS_SANDBOXED_UNPACKER_H_
 
 #include <string>
 
 #include "base/files/file_path.h"
@@ skipping 62 matching lines @@
 //
 //
 // NOTE: This class should only be used on the file thread.
 class SandboxedUnpacker : public content::UtilityProcessHostClient {
  public:
   // Unpacks the extension in |crx_path| into a temporary directory and calls
   // |client| with the result. If |run_out_of_process| is provided, unpacking
   // is done in a sandboxed subprocess. Otherwise, it is done in-process.
   SandboxedUnpacker(
       const base::FilePath& crx_path,
+      const std::string& package_hash,
       Manifest::Location location,
       int creation_flags,
       const base::FilePath& extensions_dir,
       const scoped_refptr<base::SequencedTaskRunner>& unpacker_io_task_runner,
       SandboxedUnpackerClient* client);
 
   // Start unpacking the extension. The client is called with the results.
   void Start();
 
  private:
@@ skipping 26 matching lines @@
     CRX_HEADER_INVALID,
     CRX_MAGIC_NUMBER_INVALID,
     CRX_VERSION_NUMBER_INVALID,
     CRX_EXCESSIVELY_LARGE_KEY_OR_SIGNATURE,
     CRX_ZERO_KEY_LENGTH,
     CRX_ZERO_SIGNATURE_LENGTH,
     CRX_PUBLIC_KEY_INVALID,
     CRX_SIGNATURE_INVALID,
     CRX_SIGNATURE_VERIFICATION_INITIALIZATION_FAILED,
     CRX_SIGNATURE_VERIFICATION_FAILED,
+    CRX_HASH_VERIFICATION_FAILED,
 
     // SandboxedUnpacker::RewriteManifestFile()
     ERROR_SERIALIZING_MANIFEST_JSON,
     ERROR_SAVING_MANIFEST_JSON,
 
     // SandboxedUnpacker::RewriteImageFiles()
     COULD_NOT_READ_IMAGE_DATA_FROM_DISK,
     DECODED_IMAGES_DO_NOT_MATCH_THE_MANIFEST,
     INVALID_PATH_FOR_BROWSER_IMAGE,
     ERROR_REMOVING_OLD_IMAGE_FILE,
@@ skipping 56 matching lines @@
   // Reports error and returns false if it fails.
   bool RewriteImageFiles(SkBitmap* install_icon);
   bool RewriteCatalogFiles();
 
   // Cleans up temp directory artifacts.
   void Cleanup();
 
   // The path to the CRX to unpack.
   base::FilePath crx_path_;
 
+  // The package hash that was reported from the Web Store.
+  std::string package_hash_;
+
+  // Whether we need to check the .crx hash sum.
+  bool check_crx_hash_;
+
   // Our client.
   scoped_refptr<SandboxedUnpackerClient> client_;
 
   // The Extensions directory inside the profile.
   base::FilePath extensions_dir_;
 
   // A temporary directory to use for unpacking.
   base::ScopedTempDir temp_dir_;
 
   // The root directory of the unpacked extension. This is a child of temp_dir_.
@@ skipping 22 matching lines @@
   // when calling Extenion::Create() by the crx installer.
   int creation_flags_;
 
   // Sequenced task runner where file I/O operations will be performed at.
   scoped_refptr<base::SequencedTaskRunner> unpacker_io_task_runner_;
 };
 
 }  // namespace extensions
 
 #endif  // CHROME_BROWSER_EXTENSIONS_SANDBOXED_UNPACKER_H_