Bug#664606: additional information

[Faidon Liambotis]

On 03/19/12 13:28, Simon Josefsson wrote:
> Some even further information, as I seen that others have identified the
> problem, see for example:
> 
> http://yate.null.ro/mantis/view.php?id=295
> 
> There exists a libilbc library with a clear license here:
> 
>  https://github.com/dekkers/libilbc
> 
> It is labeled as a "drop-in replacement for the non-free code in RFC
> 3591".

The iLBC code in RFC 3591 was freed when the company that original
authored it (GIPS) was acquired by Google. See e.g.
   https://datatracker.ietf.org/ipr/1649/

There are multiple people who have extracted this code from the RFC and
either included it as-is in their source trees or created libraries out
of it. I didn't check the one you pointed at, but I'm fairly sure it'll
be the exact same code.

The best solution (but I'm not speaking as a maintainer, since I haven't
been doing that for the VoIP team for quite some time) would be to
package one of these libraries and "port" all the software the uses it
to use that. Licensing-wise it won't make a big difference (besides a
proper debian/copyright), but it'll help to reduce code duplication and
security response.

Best regards,
Faidon