Validate hash_sha256 checksum on .crx update.

chrome/browser/chromeos/app_mode/kiosk_external_update_validator.h

Index: chrome/browser/chromeos/app_mode/kiosk_external_update_validator.h
diff --git a/chrome/browser/chromeos/app_mode/kiosk_external_update_validator.h b/chrome/browser/chromeos/app_mode/kiosk_external_update_validator.h
index 3d58a9d4e40a71e5c3aebf231530b0b4c4abc995..db8b6f0a5117f127084d958dd254d6bda24242d0 100644
--- a/chrome/browser/chromeos/app_mode/kiosk_external_update_validator.h
+++ b/chrome/browser/chromeos/app_mode/kiosk_external_update_validator.h
@@ -41,6 +41,7 @@ class KioskExternalUpdateValidator
       const scoped_refptr<base::SequencedTaskRunner>& backend_task_runner,
       const std::string& app_id,
       const base::FilePath& crx_path,
+      const std::string& crx_hash,
       const base::FilePath& crx_unpack_dir,
       const base::WeakPtr<KioskExternalUpdateValidatorDelegate>& delegate);
 
@@ -64,6 +65,10 @@ class KioskExternalUpdateValidator
 
   // The directory where the external crx file resides.
   base::FilePath crx_dir_;
+
+  // Hash sum of the crx file.
+  std::string crx_hash_;
+
   // The temporary directory used by SandBoxedUnpacker for unpacking extensions.
   const base::FilePath crx_unpack_dir_;