I was checking OP_CHECKSIG and see that the signature of a transaction will be computed from the transaction but copying the ScriptPubKey from the transaction referenced as input into the SigKey of the new transaction.
I guess this has something to do with tx malleability, but I cannot see in what ...