This service will be undergoing maintenance at 00:00 UTC, 2016-08-01. It is expected to last about 1 hours
Bug 848871 - cobertura - GPL code linked with ASL 1.1 code
cobertura - GPL code linked with ASL 1.1 code
Status: CLOSED NEXTRELEASE
Product: Fedora
Classification: Fedora
Component: cobertura (Show other bugs)
rawhide
Unspecified Unspecified
unspecified Severity unspecified
: ---
: ---
Assigned To: Mat Booth
Fedora Extras Quality Assurance
:
Depends On:
Blocks: FE-Legal
  Show dependency treegraph
 
Reported: 2012-08-16 11:57 EDT by Mikolaj Izdebski
Modified: 2012-10-21 08:59 EDT (History)
3 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2012-10-21 08:59:53 EDT
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:


Attachments (Terms of Use)

  None (edit)
Description Mikolaj Izdebski 2012-08-16 11:57:19 EDT
ASL 1.1 is not compatible with GPL, but ASL 1.1 code is linked with GPL-only code.

Only the ant task seems to be under ASL 1.1. Maybe the solution would be removing the ant task, but I don' know if it's needed by something.
Comment 1 Mat Booth 2012-08-16 12:53:43 EDT
As far as I can tell, this is acceptable. The following is from upstream's documentation:

""
The use of the Apache Software License in Cobertura is very straight forward. Cobertura includes a set of ant tasks which can be used to call Cobertura. Ant itself is licensed under the Apache Software License, Version 2.0. Because ant tasks are loaded directly into the runtime of ant, and the GPL is incompatable with all versions of the Apache Software License, ant tasks can not be licensed under the GPL.

For this reason, the Cobertura ant tasks are licensed under the Apache Software License, Version 1.1. And because these ant tasks are not GPL-compatable, but the rest of Cobertura is GPL, when these ant tasks invoke Cobertura they must do so by exec'ing a new JVM.
""

So the cobertura library only exists in a separate process -- I don't think that can be called "linking" in any sense.

(Although it would be less muddy if they used the GNU Classpath Exception...)
Comment 2 Mikolaj Izdebski 2012-08-16 13:06:31 EDT
> So the cobertura library only exists in a separate process -- I don't think
> that can be called "linking" in any sense.

There is direct static linkage between GPL and ASL 1.1 code.
ASL 1.1 cannot be loaded without loading GPL code. For example:

From InstrumentTask.java (ASL 1.1):
> import net.sourceforge.cobertura.util.CommandLineBuilder;
But CommandLineBuilder.java is GPLv2+ only (with no exception).
Comment 3 Mat Booth 2012-08-16 13:25:03 EDT
You could have given that example in the original bug description and saved me writing that comment... ;-)

I will raise it with upstream.
Comment 4 Mat Booth 2012-08-16 13:32:18 EDT
Actually in the latest version of cobertura, it states in the CommandLineBuild.java:

 * Note: This file is dual licensed under the GPL and the Apache

 * Source License (so that it can be used from both the main

 * Cobertura classes and the ant tasks).


So looks like they were already made aware of the problem.

Could be the solution is to just upgrade it to the latest version. Thoughts?
Comment 5 Mikolaj Izdebski 2012-08-16 13:43:02 EDT
> So looks like they were already made aware of the problem.
> 
> Could be the solution is to just upgrade it to the latest version. Thoughts?

If all files shared between separate JVM processes (which you mentioned in comment #1) are dual licensed (GPL or ASL) then updating to latest upstream may solve the problem.
Comment 6 Tom "spot" Callaway 2012-08-16 14:12:57 EDT
Looks like the obvious fix is to upgrade to the latest upstream.
Comment 7 Fedora Update System 2012-10-14 17:48:36 EDT
cobertura-1.9.4.1-1.fc18 has been submitted as an update for Fedora 18.
https://admin.fedoraproject.org/updates/cobertura-1.9.4.1-1.fc18
Comment 8 Fedora Update System 2012-10-15 13:36:21 EDT
Package cobertura-1.9.4.1-1.fc18:
* should fix your issue,
* was pushed to the Fedora 18 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing cobertura-1.9.4.1-1.fc18'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-16123/cobertura-1.9.4.1-1.fc18
then log in and leave karma (feedback).
Comment 9 Mat Booth 2012-10-21 08:59:53 EDT
Fixed in F18

Note You need to log in before you can comment on or make changes to this bug.