Validate hash_sha256 checksum on .crx update.

extensions/browser/updater/update_service.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "extensions/browser/updater/update_service.h"
 
 #include "base/message_loop/message_loop.h"
 #include "components/omaha_client/omaha_query_params.h"
 #include "content/public/browser/browser_context.h"
 #include "extensions/browser/updater/extension_downloader.h"
@@ skipping 35 matching lines @@
     const PingResult& ping,
     const std::set<int>& request_ids) {
   auto callback = download_callback_;
   download_callback_.Reset();
   callback.Run(false);
 }
 
 void UpdateService::OnExtensionDownloadFinished(
     const std::string& id,
     const base::FilePath& path,
+    const std::string& hash,
     bool file_ownership_passed,
     const GURL& download_url,
     const std::string& version,
     const PingResult& ping,
     const std::set<int>& request_id) {
   // TODO(rockot): Actually unpack and install the CRX.
   auto callback = download_callback_;
   download_callback_.Reset();
   callback.Run(true);
 }
 
 bool UpdateService::IsExtensionPending(const std::string& id) {
   // TODO(rockot): Implement this. For now all IDs are "pending".
   return true;
 }
 
 bool UpdateService::GetExtensionExistingVersion(const std::string& id,
                                                 std::string* version) {
   // TODO(rockot): Implement this.
   return false;
 }
 
 }  // namespace extensions