Bug#664606: additional information

[Simon Josefsson]

Faidon Liambotis <paravoid at debian.org> writes:

> On 03/19/12 13:28, Simon Josefsson wrote:
>> Some even further information, as I seen that others have identified the
>> problem, see for example:
>> 
>> http://yate.null.ro/mantis/view.php?id=295
>> 
>> There exists a libilbc library with a clear license here:
>> 
>>  https://github.com/dekkers/libilbc
>> 
>> It is labeled as a "drop-in replacement for the non-free code in RFC
>> 3591".
>
> The iLBC code in RFC 3591 was freed when the company that original
> authored it (GIPS) was acquired by Google. See e.g.
>    https://datatracker.ietf.org/ipr/1649/

Hi!  That is only the patent license, right?  I don't see anything about
the copyright and license of the code.

> There are multiple people who have extracted this code from the RFC and
> either included it as-is in their source trees or created libraries out
> of it.

Under what license?

> I didn't check the one you pointed at, but I'm fairly sure it'll be
> the exact same code.

No, it uses the code from WebRTC which appears to be different from the
code in the RFC.

> The best solution (but I'm not speaking as a maintainer, since I haven't
> been doing that for the VoIP team for quite some time) would be to
> package one of these libraries and "port" all the software the uses it
> to use that. Licensing-wise it won't make a big difference (besides a
> proper debian/copyright), but it'll help to reduce code duplication and
> security response.

That sounds like a good idea.

/Simon