Licensing discrepancies or ambiguities

[Tom Rini]

On Tue, Nov 21, 2023 at 11:10:57AM -0800, Vagrant Cascadian wrote:

> I've been reviewing the copyright and license information for Das U-Boot
> in preparation for uploading to Debian, and found a few surprises.
> 
>  tools/libfdt/fdt_rw.c: /* SPDX-License-Identifier: GPL-2.0+ BSD-2-Clause */

This comes from the kernel and has been clarified there:
// SPDX-License-Identifier: (GPL-2.0-or-later OR BSD-2-Clause)

> I *think* according to the SPDX spec this needs an OR or an AND. I also
> see no copyright declaration, although maybe there is a standard
> interpretation for this.
> 
> Similar issue with (though thankfully they include copyright
> declarations):
> 
>  include/bloblist.h:/* SPDX-License-Identifier: GPL-2.0+ BSD-3-Clause */
>  common/bloblist.c:// SPDX-License-Identifier: GPL-2.0+ BSD-3-Clause

Simon?

>  doc/README.ubispl:# SPDX-License-Identifier: GPL 2.0+ BSD-3-Clause

Should be an OR as well, yes, but it's also out of date and we could
just delete if a problem.

> This one has a non-existent license:
> 
>   test/lib/strlcat.c: // SPDX-License-Identifier: GPL-2.1+
> 
> No such license exists, though thankfully it references the exact file
> in the original glibc sources it came from, which is listed as
> LGPL-2.1+.

Since you did the research would you mind sending the patch? Thanks.

-- 
Tom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: not available
URL: <https://lists.denx.de/pipermail/u-boot/attachments/20231121/9d1e43d9/attachment.sig>