On Tue, Nov 21, 2023 at 11:10:57AM -0800, Vagrant Cascadian wrote: > I've been reviewing the copyright and license information for Das U-Boot > in preparation for uploading to Debian, and found a few surprises. > > tools/libfdt/fdt_rw.c: /* SPDX-License-Identifier: GPL-2.0+ BSD-2-Clause */
This comes from the kernel and has been clarified there: // SPDX-License-Identifier: (GPL-2.0-or-later OR BSD-2-Clause) > I *think* according to the SPDX spec this needs an OR or an AND. I also > see no copyright declaration, although maybe there is a standard > interpretation for this. > > Similar issue with (though thankfully they include copyright > declarations): > > include/bloblist.h:/* SPDX-License-Identifier: GPL-2.0+ BSD-3-Clause */ > common/bloblist.c:// SPDX-License-Identifier: GPL-2.0+ BSD-3-Clause Simon? > doc/README.ubispl:# SPDX-License-Identifier: GPL 2.0+ BSD-3-Clause Should be an OR as well, yes, but it's also out of date and we could just delete if a problem. > This one has a non-existent license: > > test/lib/strlcat.c: // SPDX-License-Identifier: GPL-2.1+ > > No such license exists, though thankfully it references the exact file > in the original glibc sources it came from, which is listed as > LGPL-2.1+. Since you did the research would you mind sending the patch? Thanks. -- Tom
signature.asc
Description: PGP signature
