Bug#730754: include/liblas/detail/sha1.hpp is non-free

Francesco P. Lovergine frankie at debian.org
Thu Dec 5 23:30:52 UTC 2013


On Fri, Nov 29, 2013 at 09:37:52AM +0100, Luca Falavigna wrote:
> Source: liblas
> Version: 1.2.1-5.1
> Severity: serious
> 
> 
> include/liblas/detail/sha1.hpp is licensed under these terms:
>   //  sha1.h
>   //
>   //  Copyright (C) 1998
>   //  Paul E. Jones <paulej at arid.us>
>   //  All Rights Reserved.
>   //
>   //  This software is licensed as "freeware."  Permission to distribute
>   //  this software in source and binary forms is hereby granted without
>   //  a fee.  THIS SOFTWARE IS PROVIDED 'AS IS' AND WITHOUT ANY EXPRESSED
>   //  OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
>   //  WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
>   //  THE AUTHOR SHALL NOT BE HELD LIABLE FOR ANY DAMAGES RESULTING
>   //  FROM THE USE OF THIS SOFTWARE, EITHER DIRECTLY OR INDIRECTLY, INCLUDING,
>   //  BUT NOT LIMITED TO, LOSS OF DATA OR DATA BEING RENDERED INACCURATE.
> 
> Thus, this portion of code is non-free.
> 

This issue still appears in the 1.7 (latest) version. A proper way to fix this
is adopting/adapting a license-compatible implementation such as: 
http://tamale.net/sha1
It is not complicated at all and I could provide a patch if Howard had not
time to fix this issue upstream.

-- 
Francesco P. Lovergine



More information about the Pkg-grass-devel mailing list