-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Tomasz Kojm wrote: > On Fri, 19 Oct 2007 21:04:03 +0200 > Enrico Scholz <[EMAIL PROTECTED]> wrote: > >> Hi, >> >> citing from https://bugzilla.redhat.com/show_bug.cgi?id=334371 >> >> While investigating the possible inclusion of a GPL'd unrar package >> (see Bugzilla 319831), it was discovered that clamav contained a RAR >> v3 implementation that was copied/derived from the RARlabs unrar >> source code. Eugene Roshal of RARlabs confirmed that they did not >> give permission for any RAR v3 implementation to be used under the >> GPL, only under the unrar license (which is GPL incompatible). >> >> >> >> Therefore: what is the origin of RAR v3 code? Who gave the permissions >> to license it under GPLv2+? How can we proceed so that clamav can be >> used legally? > > ClamAV doesn't include any 3rd party RAR code. The code in 0.9x was written > by our developer, in C, but in fact it uses the same decompression algorithms > and may be a subject to patents or other intellectual rights. After discussing > the matter with Eugene Roshal, we decided 0.92 will not include the rar3 code > but instead it will be provided as an additional library (most likely > licenced under LGPL + original unrar restrictions) and we will add a special > clause to ClamAV's licence to allow linking with this library. > I've just looked at svn, and the changes are not enough libclamunrar cannot be built standalone there are circular dependencies
cli_dbg/err/msg can be easly ifdef-ed to nothing there are many references to others.h that should be removed in order to not include clamav code, missing snprintf, but the license of this file allows the inclusion in libclamunrar so it's not a problem finally cli_readn, cli_writen, but I really don't known why these functions are made this way, from the comment "hard read", what does it mean? Regards - -- Gianluigi Tiesi <[EMAIL PROTECTED]> EDP Project Leader Netfarm S.r.l. - http://www.netfarm.it/ Free Software: http://oss.netfarm.it/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHH/KN3UE5cRfnO04RAvzSAKCc1eknNr5SMNr6m/OI6B+oVm0vHQCfTrQl YE7Sw1/Abmm0KtX25ioZJfU= =0K9d -----END PGP SIGNATURE----- _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net
