* [Buildroot] [PATCH 1/1] libgdiplus: bump to version 5.6 @ 2018-04-30 19:08 Fabrice Fontaine 2018-05-01 19:40 ` Thomas Petazzoni 0 siblings, 1 reply; 4+ messages in thread From: Fabrice Fontaine @ 2018-04-30 19:08 UTC (permalink / raw) To: buildroot - This version removed the COPYING file (put back upstream but content is now a redirection to LICENSE) - Add hash for license file Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> --- package/libgdiplus/libgdiplus.hash | 3 ++- package/libgdiplus/libgdiplus.mk | 9 +++++---- 2 files changed, 7 insertions(+), 5 deletions(-) diff --git a/package/libgdiplus/libgdiplus.hash b/package/libgdiplus/libgdiplus.hash index 740fefd986..cc9188d96b 100644 --- a/package/libgdiplus/libgdiplus.hash +++ b/package/libgdiplus/libgdiplus.hash @@ -1,2 +1,3 @@ # Locally computed: -sha256 ce31da0c6952c8fd160813dfa9bf4a9a871bfe7284e9e3abff9a8ee689acfe58 libgdiplus-5.4.tar.gz +sha256 6a75e4a476695cd6a1475fd6b989423ecf73978fd757673669771d8a6e13f756 libgdiplus-5.6.tar.gz +sha256 e8668765ba016692388bf2927435e3cd2bba5d2e11d5c67583f5290094b3a626 src/carbon-private.h diff --git a/package/libgdiplus/libgdiplus.mk b/package/libgdiplus/libgdiplus.mk index eb1858574d..914fc217e6 100644 --- a/package/libgdiplus/libgdiplus.mk +++ b/package/libgdiplus/libgdiplus.mk @@ -4,15 +4,16 @@ # ################################################################################ -LIBGDIPLUS_VERSION = 5.4 +LIBGDIPLUS_VERSION = 5.6 LIBGDIPLUS_SITE = $(call github,mono,libgdiplus,$(LIBGDIPLUS_VERSION)) # Although there is a LICENSE file thas specifies LGPL or MPL-1.1, # looks like it is incorrect. The actual source files specify that -# they're licensed under MIT, and so does the COPYING file (and they -# all predate the addition of the LICENSE file). +# they're licensed under MIT, and so does the original (before its +# removal/update) COPYING file (and they all predate the addition of +# the LICENSE file). LIBGDIPLUS_LICENSE = MIT -LIBGDIPLUS_LICENSE_FILES = COPYING src/carbon-private.h +LIBGDIPLUS_LICENSE_FILES = src/carbon-private.h LIBGDIPLUS_INSTALL_STAGING = YES -- 2.14.1 ^ permalink raw reply related [flat|nested] 4+ messages in thread
* [Buildroot] [PATCH 1/1] libgdiplus: bump to version 5.6 2018-04-30 19:08 [Buildroot] [PATCH 1/1] libgdiplus: bump to version 5.6 Fabrice Fontaine @ 2018-05-01 19:40 ` Thomas Petazzoni 2018-05-02 17:20 ` Sergio Prado 0 siblings, 1 reply; 4+ messages in thread From: Thomas Petazzoni @ 2018-05-01 19:40 UTC (permalink / raw) To: buildroot Hello, +Sergio. On Mon, 30 Apr 2018 21:08:40 +0200, Fabrice Fontaine wrote: > # Although there is a LICENSE file thas specifies LGPL or MPL-1.1, > # looks like it is incorrect. The actual source files specify that > -# they're licensed under MIT, and so does the COPYING file (and they > -# all predate the addition of the LICENSE file). > +# they're licensed under MIT, and so does the original (before its > +# removal/update) COPYING file (and they all predate the addition of > +# the LICENSE file). > LIBGDIPLUS_LICENSE = MIT > -LIBGDIPLUS_LICENSE_FILES = COPYING src/carbon-private.h > +LIBGDIPLUS_LICENSE_FILES = src/carbon-private.h > > LIBGDIPLUS_INSTALL_STAGING = YES Hum, this feels weird. They have re-added a COPYING file pointing to the LICENSE file, which itself that says LGPL or MPL, so perhaps this isn't wrong after all ? carbon-private.h might be MIT licensed, but the whole work may still be released under LGPL or MPL. See https://github.com/mono/libgdiplus/blob/master/LICENSE So I believe our assessment that the LICENSE file was wrong when it was saying LGPL or MPL-1.1 is not correct, and we should change the license details of libgdiplus to LGPL-2.1 or MPL-1.1. Sergio, you originally contributed libgdiplus, what do you think ? Best regards, Thomas -- Thomas Petazzoni, CTO, Bootlin (formerly Free Electrons) Embedded Linux and Kernel engineering https://bootlin.com ^ permalink raw reply [flat|nested] 4+ messages in thread
* [Buildroot] [PATCH 1/1] libgdiplus: bump to version 5.6 2018-05-01 19:40 ` Thomas Petazzoni @ 2018-05-02 17:20 ` Sergio Prado 2018-05-02 21:37 ` Arnout Vandecappelle 0 siblings, 1 reply; 4+ messages in thread From: Sergio Prado @ 2018-05-02 17:20 UTC (permalink / raw) To: buildroot Hello, > On Mon, 30 Apr 2018 21:08:40 +0200, Fabrice Fontaine wrote: > > > # Although there is a LICENSE file thas specifies LGPL or MPL-1.1, > > # looks like it is incorrect. The actual source files specify that > > -# they're licensed under MIT, and so does the COPYING file (and they > > -# all predate the addition of the LICENSE file). > > +# they're licensed under MIT, and so does the original (before its > > +# removal/update) COPYING file (and they all predate the addition of > > +# the LICENSE file). > > LIBGDIPLUS_LICENSE = MIT > > -LIBGDIPLUS_LICENSE_FILES = COPYING src/carbon-private.h > > +LIBGDIPLUS_LICENSE_FILES = src/carbon-private.h > > > > LIBGDIPLUS_INSTALL_STAGING = YES > > Hum, this feels weird. They have re-added a COPYING file pointing to > the LICENSE file, which itself that says LGPL or MPL, so perhaps this > isn't wrong after all ? > > carbon-private.h might be MIT licensed, but the whole work may still be > released under LGPL or MPL. > > See https://github.com/mono/libgdiplus/blob/master/LICENSE > > So I believe our assessment that the LICENSE file was wrong when it was > saying LGPL or MPL-1.1 is not correct, and we should change the license > details of libgdiplus to LGPL-2.1 or MPL-1.1. > > Sergio, you originally contributed libgdiplus, what do you think ? I agree. From the git commit logs, initially there was no LICENSE file and the license was MIT, as described in COPYING. Eight months later the LICENSE file was added with the message "Add new license", so we might assume the license changed to LGPL-2.1 or MPL-1.1, but they forgot to remove COPYING. In 2015 COPYING was removed and added later just because of autotools (based on the commit logs), but now pointing to LICENSE. So looks like our assessment of the license was wrong, and we should change to LGPL-2.1 or MPL-1.1. Best regards, Sergio Prado -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.busybox.net/pipermail/buildroot/attachments/20180502/45feab23/attachment.html> ^ permalink raw reply [flat|nested] 4+ messages in thread
* [Buildroot] [PATCH 1/1] libgdiplus: bump to version 5.6 2018-05-02 17:20 ` Sergio Prado @ 2018-05-02 21:37 ` Arnout Vandecappelle 0 siblings, 0 replies; 4+ messages in thread From: Arnout Vandecappelle @ 2018-05-02 21:37 UTC (permalink / raw) To: buildroot On 02-05-18 19:20, Sergio Prado wrote: > Hello, > >> On Mon, 30 Apr 2018 21:08:40 +0200, Fabrice Fontaine wrote: >> >> > ?# Although there is a LICENSE file thas specifies LGPL or MPL-1.1, >> > ?# looks like it is incorrect. The actual source files specify that >> > -# they're licensed under MIT, and so does the COPYING file (and they >> > -# all predate the addition of the LICENSE file). >> > +# they're licensed under MIT, and so does the original (before its >> > +# removal/update) COPYING file (and they all predate the addition of >> > +# the LICENSE file). >> > ?LIBGDIPLUS_LICENSE = MIT >> > -LIBGDIPLUS_LICENSE_FILES = COPYING src/carbon-private.h >> > +LIBGDIPLUS_LICENSE_FILES = src/carbon-private.h >> > >> > ?LIBGDIPLUS_INSTALL_STAGING = YES >> >> Hum, this feels weird. They have re-added a COPYING file pointing to >> the LICENSE file, which itself that says LGPL or MPL, so perhaps this >> isn't wrong after all ? >> >> carbon-private.h might be MIT licensed, but the whole work may still be >> released under LGPL or MPL. >> >> See https://github.com/mono/libgdiplus/blob/master/LICENSE >> >> So I believe our assessment that the LICENSE file was wrong when it was >> saying LGPL or MPL-1.1 is not correct, and we should change the license >> details of libgdiplus to LGPL-2.1 or MPL-1.1. >> >> Sergio, you originally contributed libgdiplus, what do you think ? > > I agree. > > From the git commit logs, initially there was no LICENSE file and the license > was MIT, as described in COPYING. Eight months later the LICENSE file was added > with the message "Add new license", so we might assume the license changed > to?LGPL-2.1 or MPL-1.1, but they forgot to remove COPYING. In 2015 COPYING was > removed and added later just because of autotools (based on the commit logs), > but now pointing to LICENSE. So looks like our?assessment of the license was > wrong, and we should change to LGPL-2.1 or MPL-1.1. So I did some research on this. It's complicated :-) Since 2004 already, there has been a LICENSE file with the text "Libgdiplus is licensed under the terms of the GNU Library GPL or the Mozilla Public License 1.1." and with the details of the MPL (but not the LGPL!) in MPL-1.1.html. However, no license headers in source files were updated. In 2009, a spec file was added that says License: LGPL v2.1 only; MOZILLA PUBLIC LICENSE (MPL/NPL); X11/MIT This file was added by someone from Novell, and Novell is mentioned in all the copyright headers in the source files. I haven't traced exactly when, but at some point contributions started requiring copyright assignment to Xamarin. For contributions between the addition of the LICENSE file and the copyright assignments, I think the status is a little unclear. Since 2016, instead of a copyright assignment, there is a Contributor License Agreement which basically licenses the .NET Foundation to relicense the code under whatever license they want. In September 2017, the MPL-1.1 and the LGPL-2.1 license texts were added to the LICENSE file, and MPL-1.1.html was removed. And finally, libgdiplus is part of the Mono project, and the Mono licensing FAQ says: "The Mono runtime, compilers and tools and most of the class libraries are licensed under the MIT license." (but libgdiplus is not really part of the mono runtime, compilers, tools or class libraries; it's an independent library that is used by the Mono project, probably by nobody else). Bottom line: - The license situation really hasn't changed since 2004. - Based on the information in the source tarball, it should be (LGPL-2.1 OR MPL-1.1) AND MIT. - But the intention is probably MIT. So I've opened an issue[1] to clarify the situation. I've also marked the v2 of this patch as Deferred and delegated to me. Regards, Arnout [1] https://github.com/mono/libgdiplus/issues/375 > > Best regards, > > Sergio Prado > > > _______________________________________________ > buildroot mailing list > buildroot at busybox.net > http://lists.busybox.net/mailman/listinfo/buildroot > -- Arnout Vandecappelle arnout at mind be Senior Embedded Software Architect +32-16-286500 Essensium/Mind http://www.mind.be G.Geenslaan 9, 3001 Leuven, Belgium BE 872 984 063 RPR Leuven LinkedIn profile: http://www.linkedin.com/in/arnoutvandecappelle GPG fingerprint: 7493 020B C7E3 8618 8DEC 222C 82EB F404 F9AC 0DDF ^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2018-05-02 21:37 UTC | newest] Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed) -- links below jump to the message on this page -- 2018-04-30 19:08 [Buildroot] [PATCH 1/1] libgdiplus: bump to version 5.6 Fabrice Fontaine 2018-05-01 19:40 ` Thomas Petazzoni 2018-05-02 17:20 ` Sergio Prado 2018-05-02 21:37 ` Arnout Vandecappelle
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.