[aur-dev] [PATCH] git-update: Check for missing install and source files

[Marcel Korpel]

* Lukas Fleischer <lfleischer at archlinux.org> (Sun, 31 May 2015 22:49:19
+0200):
> On Sun, 31 May 2015 at 22:09:19, Marcel Korpel wrote:
>> Nevertheless, there are other cases I didn't think of, like
>> https://aur.archlinux.org/packages/ttf-ms-win8/ where source files
>> should be provided by the user. Providing zero-length dummy files
>> looks like a solution, but isn't, as the checksums provided should
>> be correct against those user-provided files, not the dummy ones.
>> 
>> I can't think of a solution to this at the moment, perhaps someone
>> else?
> 
> Why are checksums an issue? You can use the checksum of the correct
> file. It doesn't match the checksum of the dummy file but I don't see
> how that is an issue (it is even good since the user immediately
> notices that something is wrong with the dummy file). Another
> possibility is to tell makepkg to skip the integrity check.

Isn't there a check of checksums before files are added to the index
(through mksrcinfo/makepkg)? If that's not the case, I stand corrected.