From 56f6f3725f4fbeeb7900ae95bd71d559695b3dc5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Th=C3=A9ophane=20Hufschmitt?=
 <theophane.hufschmitt@tweag.io>
Date: Tue, 19 Jul 2022 19:46:00 +0200
Subject: [PATCH] Don't ultimately trust the signed paths

Like the old implem did (and like you'd want it to be anyways)
---
 src/libstore/store-api.cc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/libstore/store-api.cc b/src/libstore/store-api.cc
index 61a12e84a..06d03bff2 100644
--- a/src/libstore/store-api.cc
+++ b/src/libstore/store-api.cc
@@ -305,7 +305,9 @@ void Store::addMultipleToStore(
         [&](const StorePath & path) {
             checkInterrupt();
 
-            auto & [info, source] = *infosMap.at(path);
+            auto & [info_, source] = *infosMap.at(path);
+            auto info = info_;
+            info.ultimate = false;
 
             if (!isValidPath(info.path)) {
                 MaintainCount<decltype(nrRunning)> mc(nrRunning);