Double-check safe-browsing database validity on update failure.

chrome/browser/safe_browsing/safe_browsing_store_file.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_SAFE_BROWSING_SAFE_BROWSING_STORE_FILE_H_
 #define CHROME_BROWSER_SAFE_BROWSING_SAFE_BROWSING_STORE_FILE_H_
 #pragma once
 
 #include <set>
 #include <vector>
@@ skipping 135 matching lines @@
   virtual void SetAddChunk(int32 chunk_id) OVERRIDE;
   virtual bool CheckAddChunk(int32 chunk_id) OVERRIDE;
   virtual void GetAddChunks(std::vector<int32>* out) OVERRIDE;
   virtual void SetSubChunk(int32 chunk_id) OVERRIDE;
   virtual bool CheckSubChunk(int32 chunk_id) OVERRIDE;
   virtual void GetSubChunks(std::vector<int32>* out) OVERRIDE;
 
   virtual void DeleteAddChunk(int32 chunk_id) OVERRIDE;
   virtual void DeleteSubChunk(int32 chunk_id) OVERRIDE;
 
+  // Verify |file_|'s checksum, calling the corruption callback if it
+  // does not check out.  Empty input is considered valid.
+  virtual bool CheckValidity() OVERRIDE;
+
   // Returns the name of the temporary file used to buffer data for
   // |filename|.  Exported for unit tests.
   static const FilePath TemporaryFileForFilename(const FilePath& filename) {
     return FilePath(filename.value() + FILE_PATH_LITERAL("_new"));
   }
 
  private:
   // Update store file with pending full hashes.
   virtual bool DoUpdate(const std::vector<SBAddFullHash>& pending_adds,
                         const std::set<SBPrefix>& prefix_misses,
@@ skipping 17 matching lines @@
     // FORMAT_EVENT_FOUND_SQLITE.  It can differ if the delete fails,
     // or if a failure prevents the update from succeeding.
     FORMAT_EVENT_SQLITE_DELETED,  // Obsolete
     FORMAT_EVENT_SQLITE_DELETE_FAILED,  // Obsolete
 
     // Found and deleted (or failed to delete) the ancient "Safe
     // Browsing" file.
     FORMAT_EVENT_DELETED_ORIGINAL,
     FORMAT_EVENT_DELETED_ORIGINAL_FAILED,
 
+    // The checksum did not check out in CheckValidity() or in
+    // FinishUpdate().  This most likely indicates that the machine
+    // crashed before the file was fully sync'ed to disk.
+    FORMAT_EVENT_VALIDITY_CHECKSUM_FAILURE,
+    FORMAT_EVENT_UPDATE_CHECKSUM_FAILURE,
+
     // Memory space for histograms is determined by the max.  ALWAYS
     // ADD NEW VALUES BEFORE THIS ONE.
     FORMAT_EVENT_MAX
   };
 
   // Helper to record an event related to format conversion from
   // SQLite to file.
   static void RecordFormatEvent(FormatEventType event_type);
 
   // Some very lucky users have an original-format file still in their
@@ skipping 73 matching lines @@
 
   // Tracks whether corruption has already been seen in the current
   // update, so that only one instance is recorded in the stats.
   // TODO(shess): Remove with format-migration support.
   bool corruption_seen_;
 
   DISALLOW_COPY_AND_ASSIGN(SafeBrowsingStoreFile);
 };
 
 #endif  // CHROME_BROWSER_SAFE_BROWSING_SAFE_BROWSING_STORE_FILE_H_