From 7eb12312dea39263804c9fe2150eba9d7ac993c9 Mon Sep 17 00:00:00 2001
From: Tomas Kopecek <tkopecek@redhat.com>
Date: Sep 30 2019 14:14:03 +0000
Subject: verifyChecksum fails for non-output files


PR #967 introduced another error. Before verifyChecksum was used only
from kojikamid and it made sense, that it failed on other files. Now it
is used also for build requires, etc. As it makes no harm (read-only),
we can extend this check for other paths.

Fixes: https://pagure.io/koji/issue/1669

---

diff --git a/vm/kojivmd b/vm/kojivmd
index 4db4f2f..9ac9e4c 100755
--- a/vm/kojivmd
+++ b/vm/kojivmd
@@ -759,7 +759,8 @@ class VMExecTask(BaseTaskHandler):
 
     def verifyChecksum(self, path, checksum, algo='sha1'):
         local_path = os.path.abspath(os.path.join(self.output_dir, path))
-        if not local_path.startswith(self.output_dir):
+        if not local_path.startswith(self.output_dir) and \
+           not local_path.startswith(self.buildreq_dir):
             raise koji.BuildError('invalid path: %s' % path)
         if not os.path.isfile(local_path):
             raise koji.BuildError('%s does not exist' % local_path)