Code: void DiceResponseHandler::ProcessDiceSignoutHeader(
    const std::vector<signin::DiceResponseParams::AccountInfo>& account_infos) {
  VLOG(1) << "Start processing Dice signout response";
  if (account_consistency_ ==
      signin::AccountConsistencyMethod::kDiceFixAuthErrors) {
    return;
  }

  std::string primary_account = signin_manager_->GetAuthenticatedAccountId();
  bool primary_account_signed_out = false;
  for (const auto& account_info : account_infos) {
    std::string signed_out_account =
        account_tracker_service_->PickAccountIdForAccount(account_info.gaia_id,
                                                          account_info.email);
    if (signed_out_account == primary_account) {
      primary_account_signed_out = true;
      RecordDiceResponseHeader(kSignoutPrimary);
      RecordGaiaSignoutMetrics(
          (account_info.session_index == 0)
              ? kChromePrimaryAccountIsFirstGaiaAccount
              : kChromePrimaryAccountIsSecondaryGaiaAccount);

      if (account_consistency_ == signin::AccountConsistencyMethod::kDice) {
         token_service_->UpdateCredentials(
             primary_account,
            MutableProfileOAuth2TokenServiceDelegate::kInvalidRefreshToken);
       } else {
         continue;
       }
     } else {
      token_service_->RevokeCredentials(signed_out_account);
     }
 
    for (auto it = token_fetchers_.begin(); it != token_fetchers_.end(); ++it) {
      std::string token_fetcher_account_id =
          account_tracker_service_->PickAccountIdForAccount(
              it->get()->gaia_id(), it->get()->email());
      if (token_fetcher_account_id == signed_out_account) {
        token_fetchers_.erase(it);
        break;
      }
    }
  }

  if (!primary_account_signed_out) {
    RecordDiceResponseHeader(kSignoutSecondary);
    RecordGaiaSignoutMetrics(primary_account.empty()
                                 ? kNoChromePrimaryAccount
                                 : kChromePrimaryAccountIsNotInGaiaAccounts);
  }
}

Vulnerability Type: +Info 
CWE ID: CWE-20
Summary: The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code.
Commit Message: [signin] Add metrics to track the source for refresh token updated events

This CL add a source for update and revoke credentials operations. It then
surfaces the source in the chrome://signin-internals page.

This CL also records the following histograms that track refresh token events:
* Signin.RefreshTokenUpdated.ToValidToken.Source
* Signin.RefreshTokenUpdated.ToInvalidToken.Source
* Signin.RefreshTokenRevoked.Source

These histograms are needed to validate the assumptions of how often tokens
are revoked by the browser and the sources for the token revocations.

Bug: 896182

Change-Id: I2fcab80ee8e5699708e695bc3289fa6d34859a90
Reviewed-on: https://chromium-review.googlesource.com/c/1286464
Reviewed-by: Jochen Eisinger <jochen@chromium.org>
Reviewed-by: David Roger <droger@chromium.org>
Reviewed-by: Ilya Sherman <isherman@chromium.org>
Commit-Queue: Mihai Sardarescu <msarda@chromium.org>
Cr-Commit-Position: refs/heads/master@{#606181}