Have them discuss the code in depth. Architectural and design decisions, coding conventions, alternate approaches they rejected, etc. Pretty hard to fake this if they didn't write the code.

"Problem the 3rd: evaluating a large, unfamiliar codebase is actually really hard."

Good chance to assess the candidate's ability to document. :)

More seriously, though, this is again an opportunity for the candidate to walk you through the code.