Validate hash_sha256 checksum on .crx update.

extensions/common/update_manifest.cc

Index: extensions/common/update_manifest.cc
diff --git a/extensions/common/update_manifest.cc b/extensions/common/update_manifest.cc
index 26d794f11f4ec9f25262169d98082473399ad41e..57162da71e7bc0d82a98040a4bc45ce9e4d0ffdf 100644
--- a/extensions/common/update_manifest.cc
+++ b/extensions/common/update_manifest.cc
@@ -187,9 +187,9 @@ static bool ParseSingleAppTag(xmlNode* app_node, xmlNs* xml_namespace,
     }
   }
 
-  // package_hash is optional. It is only required for blacklist. It is a
-  // sha256 hash of the package in hex format.
-  result->package_hash = GetAttribute(updatecheck, "hash");
+  // package_hash is optional. It is a sha256 hash of the package in hex
+  // format.
+  result->package_hash = GetAttribute(updatecheck, "hash_sha256");
 
   int size = 0;
   if (base::StringToInt(GetAttribute(updatecheck, "size"), &size)) {