According to Fedora Licensing Guidelines, the License: field should now
"[enumerate] all licenses covering any code or other material contained
in the corresponding binary RPM."
Furthermore, "no further analysis as to the 'effective' license should
be done."
This list of licenses need not include files which "do not end up being
compiled or otherwise included in the binary package. Common examples of
this are Autoconf scripts and non-bundled test files."
Fossology lists the following licenses for this package:
1. MIT
Used throughout. Keep.
2. LicenseRef-scancode-fsf-unlimited-no-warranty
Makefile.in's and aclocal.m4. Omit.
3. GPL-2.0-only
Used in tests/. Omit.
4. GPL-2.0-or-later
Used in m4/ and config/. Omit.
5. GPL-3.0-or-later
Used in conifg/, m4/, tests/, and the bison-generated parser
in formats/ctf/metadata/ctf-parser.[ch]. Keep. [See Bison-exception-2.2
below.]
6. LicenseRef-scancode-autoconf-simple-exception-2.0
Used in aclocal.m4 and config/. Omit.
7. LicenseRef-scancode-autoconf-macro-exception
Used only in m4/. Omit.
8. FSFULLR
Used in m4/ and aclocal.m4. Omit.
9. FSFAP
Used only in m4/. Omit.
10. LicenseRef-scancode-free-unknown
In bindings/python/setup.py.in: false identification. Clearly MIT.
In config/. Omit.
11. Libtool-exception
Used in config/, m4/, and configure. Omit.
12. LGPL-2.1-only
From include/babeltrace/list.h. Keep.
13. GPL-1.0-or-later
From tests/bin/*/*.in: [False identification.] Omit.
14. LicenseRef-scancode-autoconf-simple-exception
Used only in config/. Omit.
15. FSFUL
Used in m4/ and configure. Omit.
16. Bison-exception-2.2
See #5. Keep.
17. BSD-4-Clause-UC
From */crc32.[ch]. Keep.
18. BSD-2-Clause
From tests/utils/tap. Omit.
19. X11
From config/install-sh. Omit.
20. LicenseRef-scancode-public-domain
From config/install-sh. Omit.
21. LGPL-2.0-only
From tests/ctf-traces/suceed/*/dummystream. Omit.
AND together all the keeps EXCEPT Bison-exception-2.2/GPL-3.0-or-later.
OR those. [I am not even going to pretend that this is absolutely
accurate, but it is closer to the reality of it.]
popt-1.19 commit 7182e4618ad5a0186145fc2aa4a98c2229afdfa8
includes a patch to free the memory returned by poptGetArg.
This introduced a use-after-free in babeltrace.c:main().
See bug for complete description.
Resolves: rhbz#2126067