0000355: ZyXEL Kernel /BusyBox GPL violation? - BusyBox Bug and Patch Tracking

(0000342)
macemoneta
07-26-05 07:41

Some additional details, from the kernel violation template:

The checklist:

      * Does the distribution contain a copy of the License?

No

      * Does it clearly state which software is covered by the License?
        Does it say anything misleading, perhaps giving the impression
        that something is covered by the License when in fact it is not?

No, neither the printed documentation, nor their web site states which software is covered by GPL.

      * Is source code included in the distribution?

No

      * Is a written offer for source code included with a distribution
        of just binaries?

No

      * Is the available source code complete, or is it designed for
        linking in other non-free modules?

No source code

If there seems to be a real violation, the next thing you need to do is
record the details carefully:

      * the precise name of the product

ZyXEL P-330W

      * the name of the person or organization distributing it

ZyXEL: http://www.zyxel.com [^]

      * email addresses, postal addresses and phone numbers for how to
        contact the distributor(s)

ZyXEL Communications
1130 N Miller Street
Anaheim, CA 92806
1-800-255-4101
No email direct found.


      * the exact name of the package whose license is violated

BusyBox v1.00-pre8

      * how the license was violated:
              * Is the copyright notice of the copyright holder
                included?

No
              * Is the source code completely missing?

Yes

              * Does the written offer for source, if given, only give a
                website and/or FTP site where to download the source?

No location for download, no offer of source available.

              * Is there a copy of the license included in the
                distribution?

No

              * Is some of the source available, but not all? If so,
                what parts are missing?

All missing

(0000357)
macemoneta
07-31-05 13:25

A firmware update is now available for download from the manufacturer here:

ftp://ftp.us.zyxel.com/P330W/firmware/P330W_v4.2.1.6.8e_firmware.zip [^]

Examining the firmware file, I also found the "webs" web server (also GPL), so I notified that project developer as well.

(0000362)
vapier
07-31-05 15:53

ive mirrored the zip here:
http://dev.gentoo.org/~vapier/uclibc/P330W_v4.2.1.6.8e_firmware.zip [^]

(0000891)
macemoneta
01-09-06 17:39

Zyxel has released the sourcecode here: ftp://opensource.zyxel.com [^]

(0000892)
vapier
01-09-06 17:44

thanks ! ive moved them from the hall of shame to the products page :)

(0001647)
macemoneta
09-27-06 00:32
edited on: 09-27-06 00:51

It looks like Zyxel has fallen out of compliance again. The ftp site is no longer available (tried for over 30 days), and multiple support requests to Zyxel on the issue have been ignored.

Also, all references to Linux and the GPL license have been removed from the web site as well as in the firmware download, user manual, etc.

(0001736)
ehovland
11-07-06 12:13

As of 2006-11-07 the FTP server ftp://opensource.zyxel.com/ [^] is up and serving files for three different products.

It would be nice if the ftp site was more easily found through their website. Neither 'opensource' or 'linux' produces a hit to that FTP server or an http enabled link to that source code.

I wouldn't call that compliance unless the FSF calls that compliance. Feel free to keep nudging ZyXEL.

(0001737)
macemoneta
11-07-06 13:03

Confirming that the server is back up, but they are still not providing the current firmware. For the P-330W, the current firmware is P330W_V1.7_firmware.zip, but their source is for the original base release (1.4):

ncftp /P330W > ls
binutils-2.14.90.0.8.tar.gz P-330W_V1.4.tgz
gcc-3.3.3.tar.gz upnpd.tgz

There doesn't seem to be much incentive for them to remain in compliance. My emails to them seem to be bit-bucketed at this point.

(0002809)
madsara
10-03-07 06:35

I'm curious, does anyone have the source code and build tools for the P330? Zyxel currently does *not* have this available for download via opensource.zyxel.com.

I have a number of these devices in my possession, and my emails to Zyxel have gone unanswered.

If anyone still has a tarball lying around, I'd be grateful.

(0002817)
macemoneta
10-10-07 08:03

I contacted them again, and requested that they restore the source and license. As of yesterday, it looks like they are in compliance, again:

ftp://opensource.zyxel.com/P-330W/ [^]

(0013204)
sfstudio
10-10-08 21:26

ftp://opensource.zyxel.com/P-330W/ [^] now empty. $(

(0013274)
madsara
10-11-08 10:17

sfstudio... as of Sat Oct 11 13:15:00 EDT 2008, the Zyxel site has the following files:

P-330W_FW_V1.7_Source Code.zip
P330W_v18_sourcecode.tar.gz

Let's see how long before they disappear again.

Notes
(0000342) macemoneta 07-26-05 07:41	Some additional details, from the kernel violation template: The checklist: * Does the distribution contain a copy of the License? No * Does it clearly state which software is covered by the License? Does it say anything misleading, perhaps giving the impression that something is covered by the License when in fact it is not? No, neither the printed documentation, nor their web site states which software is covered by GPL. * Is source code included in the distribution? No * Is a written offer for source code included with a distribution of just binaries? No * Is the available source code complete, or is it designed for linking in other non-free modules? No source code If there seems to be a real violation, the next thing you need to do is record the details carefully: * the precise name of the product ZyXEL P-330W * the name of the person or organization distributing it ZyXEL: http://www.zyxel.com [^] * email addresses, postal addresses and phone numbers for how to contact the distributor(s) ZyXEL Communications 1130 N Miller Street Anaheim, CA 92806 1-800-255-4101 No email direct found. * the exact name of the package whose license is violated BusyBox v1.00-pre8 * how the license was violated: * Is the copyright notice of the copyright holder included? No * Is the source code completely missing? Yes * Does the written offer for source, if given, only give a website and/or FTP site where to download the source? No location for download, no offer of source available. * Is there a copy of the license included in the distribution? No * Is some of the source available, but not all? If so, what parts are missing? All missing

(0000357) macemoneta 07-31-05 13:25	A firmware update is now available for download from the manufacturer here: ftp://ftp.us.zyxel.com/P330W/firmware/P330W_v4.2.1.6.8e_firmware.zip [^] Examining the firmware file, I also found the "webs" web server (also GPL), so I notified that project developer as well.

(0000362) vapier 07-31-05 15:53	ive mirrored the zip here: http://dev.gentoo.org/~vapier/uclibc/P330W_v4.2.1.6.8e_firmware.zip [^]

(0000891) macemoneta 01-09-06 17:39	Zyxel has released the sourcecode here: ftp://opensource.zyxel.com [^]

(0000892) vapier 01-09-06 17:44	thanks ! ive moved them from the hall of shame to the products page :)

(0001647) macemoneta 09-27-06 00:32 edited on: 09-27-06 00:51	It looks like Zyxel has fallen out of compliance again. The ftp site is no longer available (tried for over 30 days), and multiple support requests to Zyxel on the issue have been ignored. Also, all references to Linux and the GPL license have been removed from the web site as well as in the firmware download, user manual, etc.

(0001736) ehovland 11-07-06 12:13	As of 2006-11-07 the FTP server ftp://opensource.zyxel.com/ [^] is up and serving files for three different products. It would be nice if the ftp site was more easily found through their website. Neither 'opensource' or 'linux' produces a hit to that FTP server or an http enabled link to that source code. I wouldn't call that compliance unless the FSF calls that compliance. Feel free to keep nudging ZyXEL.

(0001737) macemoneta 11-07-06 13:03	Confirming that the server is back up, but they are still not providing the current firmware. For the P-330W, the current firmware is P330W_V1.7_firmware.zip, but their source is for the original base release (1.4): ncftp /P330W > ls binutils-2.14.90.0.8.tar.gz P-330W_V1.4.tgz gcc-3.3.3.tar.gz upnpd.tgz There doesn't seem to be much incentive for them to remain in compliance. My emails to them seem to be bit-bucketed at this point.

(0002809) madsara 10-03-07 06:35	I'm curious, does anyone have the source code and build tools for the P330? Zyxel currently does not have this available for download via opensource.zyxel.com. I have a number of these devices in my possession, and my emails to Zyxel have gone unanswered. If anyone still has a tarball lying around, I'd be grateful.

(0002817) macemoneta 10-10-07 08:03	I contacted them again, and requested that they restore the source and license. As of yesterday, it looks like they are in compliance, again: ftp://opensource.zyxel.com/P-330W/ [^]

(0013204) sfstudio 10-10-08 21:26	ftp://opensource.zyxel.com/P-330W/ [^] now empty. $(

(0013274) madsara 10-11-08 10:17	sfstudio... as of Sat Oct 11 13:15:00 EDT 2008, the Zyxel site has the following files: P-330W_FW_V1.7_Source Code.zip P330W_v18_sourcecode.tar.gz Let's see how long before they disappear again.

Issue History
Date Modified	Username	Field	Change
07-25-05 20:27	macemoneta	New Issue
07-25-05 20:27	macemoneta	Status	new => assigned
07-25-05 20:27	macemoneta	Assigned To	=> BusyBox
07-26-05 07:41	macemoneta	Note Added: 0000342
07-31-05 13:25	macemoneta	Note Added: 0000357
07-31-05 15:53	vapier	Note Added: 0000362
01-09-06 17:39	macemoneta	Note Added: 0000891
01-09-06 17:44	vapier	Note Added: 0000892
01-09-06 17:44	vapier	Status	assigned => closed
01-09-06 17:44	vapier	Resolution	open => fixed
09-27-06 00:32	macemoneta	Status	closed => feedback
09-27-06 00:32	macemoneta	Resolution	fixed => reopened
09-27-06 00:32	macemoneta	Note Added: 0001647
09-27-06 00:51	macemoneta	Note Edited: 0001647
09-27-06 00:51	macemoneta	Note Edited: 0001647
11-07-06 12:13	ehovland	Note Added: 0001736
11-07-06 13:03	macemoneta	Note Added: 0001737
10-03-07 06:35	madsara	Note Added: 0002809
10-10-07 08:03	macemoneta	Note Added: 0002817
10-10-08 21:26	sfstudio	Note Added: 0013204
10-11-08 10:17	madsara	Note Added: 0013274

Relationships