[gin] Fingerprint the V8 snapshot files on Windows and verify before loading the snapshot.

gin/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
+import("//build/module_args/v8.gni")
+
 component("gin") {
   sources = [
     "arguments.cc",
     "arguments.h",
     "array_buffer.cc",
     "array_buffer.h",
     "context_holder.cc",
     "converter.cc",
     "converter.h",
     "debug_impl.cc",
@@ skipping 46 matching lines @@
 
   defines = [ "GIN_IMPLEMENTATION" ]
 
   public_deps = [
     "//base",
     "//v8",
   ]
   deps = [
     "//base/third_party/dynamic_annotations",
   ]
+  if (v8_use_external_startup_data && is_win) {
+    deps += [
+      ":gin_v8_snapshot_fingerprint",
+      "//crypto:crypto",
+    ]
+    sources += [ "$target_gen_dir/v8_snapshot_fingerprint.cc" ]
+    defines += [ "V8_VERIFY_EXTERNAL_STARTUP_DATA" ]
+  }
+}
+
+if (v8_use_external_startup_data) {
+  action("gin_v8_snapshot_fingerprint") {
+    script = "//gin/fingerprint/fingerprint_v8_snapshot.py"
+
+    snapshot_file = "$root_build_dir/snapshot_blob.bin"
+    natives_file = "$root_build_dir/natives_blob.bin"
+    output_file = "$target_gen_dir/v8_snapshot_fingerprint.cc"
+
+    args = [
+      "--snapshot_file",
+      rebase_path(snapshot_file, root_build_dir),
+      "--natives_file",
+      rebase_path(natives_file, root_build_dir),
+      "--output_file",
+      rebase_path(output_file, root_build_dir),
+    ]
+    inputs = [
+      snapshot_file,
+      natives_file,
+    ]
+    outputs = [
+      output_file,
+    ]
+  }
 }
 
 executable("gin_shell") {
   sources = [
     "shell/gin_main.cc",
   ]
 
   deps = [
     ":gin",
     "//base",
@@ skipping 39 matching lines @@
     "test/run_js_tests.cc",
     "wrappable_unittest.cc",
   ]
 
   deps = [
     ":gin_test",
     "//base/test:test_support",
     "//v8",
   ]
 }