Bug#664606: Source package contains non-free IETF RFC/I-D

[Simon Josefsson]

Severity: serious
Package: h323plus
Version: 1.24.0~dfsg-1
User: debian-release at lists.debian.org
Usertags: nonfree-doc rfc

Hi!

This source package contains the following files from the IETF under
non-free license terms:

h323plus/plugins/audio/iLBC/iLBC/draft-ietf-avt-ilbc-codec-05.txt

Further, it seems several source code files have been extracted from the
document.  Quoting the Table of Content:

   APPENDIX A REFERENCE IMPLEMENTATION...............................43
   A.1 iLBC_test.c...................................................44
   A.2 iLBC_encode.h.................................................49
   A.3 iLBC_encode.c.................................................50
   A.4 iLBC_decode.h.................................................59
   A.5 iLBC_decode.c.................................................60
   A.6 iLBC_define.h.................................................71
   A.7 constants.h...................................................74
   A.8 constants.c...................................................76
   A.9 anaFilter.h...................................................89
   A.10 anaFilter.c..................................................89
   A.11 createCB.h...................................................90
   A.12 createCB.c...................................................91
   A.13 doCPLC.h.....................................................95
   A.14 doCPLC.c.....................................................96
   A.15 enhancer.h..................................................101
   A.16 enhancer.c..................................................101
   A.17 filter.h....................................................113
   A.18 filter.c....................................................114
   A.19 FrameClassify.h.............................................117
   A.20 FrameClassify.c.............................................118
   A.21 gainquant.h.................................................120
   A.22 gainquant.c.................................................120
   A.23 getCBvec.h..................................................122
   A.24 getCBvec.c..................................................123
   A.25 helpfun.h...................................................126
   A.26 helpfun.c...................................................128
   A.27 hpInput.h...................................................133
   A.28 hpInput.c...................................................134
   A.29 hpOutput.h..................................................135
   A.30 hpOutput.c..................................................135
   A.31 iCBConstruct.h..............................................136
   A.32 iCBConstruct.c..............................................137
   A.33 iCBSearch.h.................................................139
   A.34 iCBSearch.c.................................................140
   A.35 LPCdecode.h.................................................148
   A.36 LPCdecode.c.................................................149
   A.37 LPCencode.h.................................................152
   A.38 LPCencode.c.................................................152
   A.39 lsf.h.......................................................156
   A.40 lsf.c.......................................................157
   A.41 packing.h...................................................162
   A.42 packing.c...................................................163
   A.43 StateConstructW.h...........................................166
   A.44 StateConstructW.c...........................................166
   A.45 StateSearchW.h..............................................168
   A.46 StateSearchW.c..............................................169
   A.47 syntFilter.h................................................172
   A.48 syntFilter.c................................................173

I have verified that several of these files mentioned in the TOC are
found in h323plus/plugins/audio/iLBC/iLBC/.  All files have this license
header:

   /******************************************************************
   
       iLBC Speech Coder ANSI-C Source Code
   
       lsf.h             
   
       Copyright (C) The Internet Society (2004). 
       All Rights Reserved.
   
   
   
   ******************************************************************/

I do not see anything in debian/copyright discussing the license of
these files.

The license on RFC/I-Ds is not DFSG-free, see:

 * http://wiki.debian.org/NonFreeIETFDocuments
 * http://bugs.debian.org/199810

According to the squeeze/wheezy release policy, source packages must be
DFSG-free, see:

 * http://release.debian.org/squeeze/rc_policy.txt
 * http://release.debian.org/wheezy/rc_policy.txt

The severity is serious, because this violates the Debian policy:

 * http://www.debian.org/doc/debian-policy/ch-archive.html#s-dfsg

There are (at least) three ways to fix this problem.  In order of
preference:

1. Ask the author of the RFC to re-license the RFC under a free
   license.  A template for this e-mail request can be found at
   http://wiki.debian.org/NonFreeIETFDocuments

2. Remove the non-free material from the source, e.g., by re-packaging
   the upstream archive and adding 'dfsg' to the Debian package
   version name.

3. Move the package to non-free.

General discussions are kindly requested to take place on debian-legal
or debian-devel in the thread with Subject: "Non-free IETF RFC/I-Ds in
source packages".

Thanks,
Simon