New submission from Robert Lukassen <robert.lukas...@gmail.com>: The software in the Edimax IC-9000 IP camera (http://www.edimax.com/en/produce_detail.php?pd_id=336&pl1_id=8&pl2_id=80) is based on a number of open source projects licensed under LGPL and GPLv2 (some GPLv2 or later). While Edimax has made an archive with firmware source code available on their website, this can be shown not to correspond to the actual firmware used in their product and is incomplete.
Analysis of the binary firmware image, as well as responses to selective HTTP queries to the actual product, show that this product is using both ffmpeg and ffserver which are licensed under the LGPL (or possibly, due to inclusion of one or more modules originally licensed under GPL, GPL). These ffmpeg and ffserver binaries can be shown to be modified. The published firmware source code does *not* include any source code of these ffmpeg and ffserver binaries, nor does it contain the modifications in that source code applied in that IC-9000 camera. The company has been responsive to my enquiries about this (this actually led to the publication of the firmware source code on their website), until I informed them of my analysis that this firmware source code does not correspond to the actual product firmware (and in fact seems to be a straight copy of the BSP for the main System-on-Chip (CPU) in their product, originally supplied by "Faraday"). It can further be shown that the ffmpeg and ffserver binaries have probably been produced by StarVedia (with Edimax being a distributor of re-labeled StarVedia products). The Edimax IC-9000 is clearly a clone of the IC-602 StarVedia product. ---------- messages: 11314 priority: normal status: new substatus: new title: Possible license violation, Edimax topic: (L)GPL violation ________________________________________________ FFmpeg issue tracker <iss...@roundup.ffmpeg.org> <https://roundup.ffmpeg.org/issue2116> ________________________________________________
