[BusyBox 0000355]: ZyXEL Kernel /BusyBox GPL violation?

bugs at busybox.net bugs at busybox.net
Sat Oct 11 04:26:54 UTC 2008


A NOTE has been added to this issue. 
====================================================================== 
http://busybox.net/bugs/view.php?id=355 
====================================================================== 
Reported By:                macemoneta
Assigned To:                BusyBox
====================================================================== 
Project:                    BusyBox
Issue ID:                   355
Category:                   License Violations
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     feedback
====================================================================== 
Date Submitted:             07-25-2005 20:27 PDT
Last Modified:              10-10-2008 21:26 PDT
====================================================================== 
Summary:                    ZyXEL Kernel /BusyBox GPL violation?
Description: 
I purchased a ZyXEL router, and noted in its log:

0day 00:00:16 klogd started: BusyBox v1.00-pre8 (2005.06.02-02:19+0000)
0day 00:00:16 Linux version 2.4.18-MIPS-01.00 (root at UTOPIA) (gcc version
3.3.3) http://busybox.net/bugs/view.php?id=53 Fri Jun 10 16:13:48 CST 2005
...

I contacted the vendor to request source, since no mention of it is made
on their website (http://www.zyxel.com), or documentation:

---
Subject: Linux GPL software for P-330W  
                
Where can I obtain the Linux software for the P-330W, as required under
Gnu Public Licence (Firmware Version: v4.2.1.6.6e.)?
---

Their response:

---
Sir, 
Our unit is only based on Linux. It is not necessarily built off the
source code. The code was developed by our engineers in Taiwan.  As this
is the case, we do not have access to the code here, and it is not
covered by the GPL. If you need more assistance, please call at
1-800-255-4101. 

Thank you,

Scott Latimer
Technicial Support Specialist
ZyXEL Communications
1130 N Miller Street
Anaheim, CA  92806 
A+, Network+
---

The response seems meaningless; does this constitute a violation of GPL?
If so what, if any, action needs to be taken?
====================================================================== 

---------------------------------------------------------------------- 
 macemoneta - 07-26-05 07:41  
---------------------------------------------------------------------- 
Some additional details, from the kernel violation template:

The checklist:

      * Does the distribution contain a copy of the License?

No

      * Does it clearly state which software is covered by the License?
        Does it say anything misleading, perhaps giving the impression
        that something is covered by the License when in fact it is not?

No, neither the printed documentation, nor their web site states which
software is covered by GPL.

      * Is source code included in the distribution?

No

      * Is a written offer for source code included with a distribution
        of just binaries?

No

      * Is the available source code complete, or is it designed for
        linking in other non-free modules?

No source code



If there seems to be a real violation, the next thing you need to do is
record the details carefully:

      * the precise name of the product

ZyXEL P-330W

      * the name of the person or organization distributing it

ZyXEL: http://www.zyxel.com
        
      * email addresses, postal addresses and phone numbers for how to
        contact the distributor(s)

ZyXEL Communications
1130 N Miller Street
Anaheim, CA  92806
1-800-255-4101
No email direct found.

        
      * the exact name of the package whose license is violated

BusyBox v1.00-pre8
        
      * how the license was violated: 
              * Is the copyright notice of the copyright holder
                included?

No
              * Is the source code completely missing?

Yes
                
              * Does the written offer for source, if given, only give a
                website and/or FTP site where to download the source?

No location for download, no offer of source available.
                
              * Is there a copy of the license included in the
                distribution?

No
                
              * Is some of the source available, but not all? If so,
                what parts are missing?

All missing 

---------------------------------------------------------------------- 
 macemoneta - 07-31-05 13:25  
---------------------------------------------------------------------- 
A firmware update is now available for download from the manufacturer
here:

ftp://ftp.us.zyxel.com/P330W/firmware/P330W_v4.2.1.6.8e_firmware.zip

Examining the firmware file, I also found the "webs" web server (also
GPL), so I notified that project developer as well. 

---------------------------------------------------------------------- 
 vapier - 07-31-05 15:53  
---------------------------------------------------------------------- 
ive mirrored the zip here:
http://dev.gentoo.org/~vapier/uclibc/P330W_v4.2.1.6.8e_firmware.zip 

---------------------------------------------------------------------- 
 macemoneta - 01-09-06 17:39  
---------------------------------------------------------------------- 
Zyxel has released the sourcecode here: ftp://opensource.zyxel.com 

---------------------------------------------------------------------- 
 vapier - 01-09-06 17:44  
---------------------------------------------------------------------- 
thanks !  ive moved them from the hall of shame to the products page :) 

---------------------------------------------------------------------- 
 macemoneta - 09-27-06 00:51  
---------------------------------------------------------------------- 
It looks like Zyxel has fallen out of compliance again.  The ftp site is no
longer available (tried for over 30 days), and multiple support requests to
Zyxel on the issue have been ignored.

Also, all references to Linux and the GPL license have been removed from
the web site as well as in the firmware download, user manual, etc.

 

---------------------------------------------------------------------- 
 ehovland - 11-07-06 12:13  
---------------------------------------------------------------------- 
As of 2006-11-07 the FTP server ftp://opensource.zyxel.com/ is up and
serving files for three different products.

It would be nice if the ftp site was more easily found through their
website. Neither 'opensource' or 'linux' produces a hit to that FTP server
or an http enabled link to that source code.

I wouldn't call that compliance unless the FSF calls that compliance. Feel
free to keep nudging ZyXEL. 

---------------------------------------------------------------------- 
 macemoneta - 11-07-06 13:03  
---------------------------------------------------------------------- 
Confirming that the server is back up, but they are still not providing the
current firmware.  For the P-330W, the current firmware is
P330W_V1.7_firmware.zip, but their source is for the original base release
(1.4): 

ncftp /P330W > ls
binutils-2.14.90.0.8.tar.gz            P-330W_V1.4.tgz
gcc-3.3.3.tar.gz                       upnpd.tgz

There doesn't seem to be much incentive for them to remain in compliance. 
My emails to them seem to be bit-bucketed at this point. 

---------------------------------------------------------------------- 
 madsara - 10-03-07 06:35  
---------------------------------------------------------------------- 
I'm curious, does anyone have the source code and build tools for the P330?
Zyxel currently does *not* have this available for download via
opensource.zyxel.com. 

I have a number of these devices in my possession, and my emails to Zyxel
have gone unanswered. 

If anyone still has a tarball lying around, I'd be grateful. 

---------------------------------------------------------------------- 
 macemoneta - 10-10-07 08:03  
---------------------------------------------------------------------- 
I contacted them again, and requested that they restore the source and
license.  As of yesterday, it looks like they are in compliance, again:

ftp://opensource.zyxel.com/P-330W/ 

---------------------------------------------------------------------- 
 sfstudio - 10-10-08 21:26  
---------------------------------------------------------------------- 
ftp://opensource.zyxel.com/P-330W/  now empty. $( 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
07-25-05 20:27  macemoneta     New Issue                                    
07-25-05 20:27  macemoneta     Status                   new => assigned     
07-25-05 20:27  macemoneta     Assigned To               => BusyBox         
07-26-05 07:41  macemoneta     Note Added: 0000342                          
07-31-05 13:25  macemoneta     Note Added: 0000357                          
07-31-05 15:53  vapier         Note Added: 0000362                          
01-09-06 17:39  macemoneta     Note Added: 0000891                          
01-09-06 17:44  vapier         Note Added: 0000892                          
01-09-06 17:44  vapier         Status                   assigned => closed  
01-09-06 17:44  vapier         Resolution               open => fixed       
09-27-06 00:32  macemoneta     Status                   closed => feedback  
09-27-06 00:32  macemoneta     Resolution               fixed => reopened   
09-27-06 00:32  macemoneta     Note Added: 0001647                          
09-27-06 00:51  macemoneta     Note Edited: 0001647                         
09-27-06 00:51  macemoneta     Note Edited: 0001647                         
11-07-06 12:13  ehovland       Note Added: 0001736                          
11-07-06 13:03  macemoneta     Note Added: 0001737                          
10-03-07 06:35  madsara        Note Added: 0002809                          
10-10-07 08:03  macemoneta     Note Added: 0002817                          
10-10-08 21:26  sfstudio       Note Added: 0013204                          
======================================================================




More information about the busybox-cvs mailing list