files sources: verify hashes for source files if available

Signed-off-by: Gordon Hecker <gh@emlix.com>

diff --git a/local/files.lua b/local/files.lua
index e26286b0cfe804aaa0eaa7c600632ec4d6d9f1d4..d171f3f431fb1ddec4599ac88caac3f55acb6ca2 100644 (file)
--- a/local/files.lua
+++ b/local/files.lua
@@ -224,6 +224,12 @@ function files.prepare_source(info, sourcename, sourceset, buildpath)
   e2lib.log(4, string.format("prepare source: %s", sourcename))
   local s = info.sources[sourcename]
   for _,file in ipairs(info.sources[sourcename].file) do
+    if file.sha1 then
+      rc, re = e2tool.verify_hash(info, file.server, file.location, file.sha1)
+      if not rc then
+       return false, e:cat(re)
+      end
+    end
     if file.unpack then
       local cache_flags = { cache = true }
       local rc, re = cache.cache_file(info.cache, file.server, file.location,