From 773de6e82050e02e7b6aa22d6c097a1352f4eb32 Mon Sep 17 00:00:00 2001
From: "Jan Alexander Steffens (heftig)" <heftig@archlinux.org>
Date: Wed, 19 Mar 2025 21:17:28 +0100
Subject: [PATCH] makepkg: Run verify in SRCDEST, not always startdir

`verify()` verifies downloaded sources before we link or copy them into
`$srcdir`. For this reason it runs in `$startdir`. However, sources are
actually downloaded into `$SRCDEST`, which merely defaults to
`$startdir`.
---
 doc/PKGBUILD.5.asciidoc | 3 ++-
 scripts/makepkg.sh.in   | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/doc/PKGBUILD.5.asciidoc b/doc/PKGBUILD.5.asciidoc
index 775ad021..f37c6e77 100644
--- a/doc/PKGBUILD.5.asciidoc
+++ b/doc/PKGBUILD.5.asciidoc
@@ -342,7 +342,8 @@ function.
 	An optional `verify()` function can be specified to implement arbitrary
 	source authentication. The function should return a non-zero exit code when
 	verification fails. This function is run before sources are extracted.
-	This function is run inside `$startdir`.
+	This function is run inside `$SRCDEST`, if set, otherwise the same
+	directory as the PKGBUILD.
 
 *prepare() Function*::
 	An optional `prepare()` function can be specified in which operations to
diff --git a/scripts/makepkg.sh.in b/scripts/makepkg.sh.in
index 591b010e..f69d3b09 100644
--- a/scripts/makepkg.sh.in
+++ b/scripts/makepkg.sh.in
@@ -450,7 +450,7 @@ run_function() {
 }
 
 run_verify() {
-	run_function_safe "verify" "$startdir"
+	run_function_safe "verify" "$SRCDEST"
 }
 
 run_prepare() {