Validate hash_sha256 checksum on .crx update.

chrome/browser/chromeos/app_mode/kiosk_external_updater.cc

Index: chrome/browser/chromeos/app_mode/kiosk_external_updater.cc
diff --git a/chrome/browser/chromeos/app_mode/kiosk_external_updater.cc b/chrome/browser/chromeos/app_mode/kiosk_external_updater.cc
index 8f58335a1d6754a6239eb7b2f3dab5e8ff9227f2..28e413c160b5748672932fd6478cb78cb2001312 100644
--- a/chrome/browser/chromeos/app_mode/kiosk_external_updater.cc
+++ b/chrome/browser/chromeos/app_mode/kiosk_external_updater.cc
@@ -93,6 +93,9 @@ bool ShouldUpdateForHigherVersion(const std::string& version_1,
 KioskExternalUpdater::ExternalUpdate::ExternalUpdate() {
 }
 
+KioskExternalUpdater::ExternalUpdate::~ExternalUpdate() {
+}
+
 KioskExternalUpdater::KioskExternalUpdater(
     const scoped_refptr<base::SequencedTaskRunner>& backend_task_runner,
     const base::FilePath& crx_cache_dir,
@@ -325,11 +328,10 @@ void KioskExternalUpdater::ValidateExternalUpdates() {
        ++it) {
     if (it->second.update_status == PENDING) {
       scoped_refptr<KioskExternalUpdateValidator> crx_validator =
-          new KioskExternalUpdateValidator(backend_task_runner_,
-                                           it->first,
-                                           it->second.external_crx,
-                                           crx_unpack_dir_,
-                                           weak_factory_.GetWeakPtr());
+          new KioskExternalUpdateValidator(
+              backend_task_runner_, it->first, it->second.external_crx,
+              it->second.package_hash, crx_unpack_dir_,
+              weak_factory_.GetWeakPtr());
       crx_validator->Start();
       break;
     }