[kaffe] [Fwd: [ openantivirus-Bugs-550444 ] kaffe operation completely
broken]
Brian May
bam@snoopy.apana.org.au
07 May 2002 10:27:29 +1000
--=-WJ6Kv0dZMftD1IphTzM5
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Hello,
I have been told that I probably should forward this kafe bug report
(with zip files containing directories) to you.
Possibly this bug has already been fixed in CVS.
--
Brian May <bam@snoopy.apana.org.au>
--=-WJ6Kv0dZMftD1IphTzM5
Content-Disposition: inline
Content-Description: Forwarded message - [ openantivirus-Bugs-550444 ] kaffe
operation completely broken
Content-Type: message/rfc822
Return-Path: <noreply@sourceforge.net>
Delivered-To: bam@snoopy.apana.org.au
Received: from localhost (localhost [127.0.0.1]) by snoopy.apana.org.au
(Postfix) with ESMTP id 9055D2F79A for <bam@snoopy.apana.org.au>; Mon, 6
May 2002 22:24:07 +1000 (EST)
Received: from usw-sf-netmisc.sourceforge.net
(usw-sf-sshgate.sourceforge.net [216.136.171.253]) by snoopy.apana.org.au
(Postfix) with ESMTP id E63142F795 for <bam@snoopy.apana.org.au>; Mon, 6
May 2002 22:24:01 +1000 (EST)
Received: from usw-sf-web3-b.sourceforge.net ([10.3.1.23]
helo=usw-sf-web3.sourceforge.net) by usw-sf-netmisc.sourceforge.net with
esmtp (Exim 3.22 #1 (Debian)) id 174hX3-00023B-00; Mon, 06 May 2002
05:23:57 -0700
Received: from nobody by usw-sf-web3.sourceforge.net with local (Exim 3.33
#1 (Debian)) id 174hX3-0008SK-00; Mon, 06 May 2002 05:23:57 -0700
To: noreply@sourceforge.net
From: noreply@sourceforge.net
Subject: [ openantivirus-Bugs-550444 ] kaffe operation completely broken
Message-Id: <E174hX3-0008SK-00@usw-sf-web3.sourceforge.net>
Date: Mon, 06 May 2002 05:23:57 -0700
X-Virus-Scanned: by AMaViS snapshot-20020316
Content-Type: text/plain
Mime-Version: 1.0
Bugs item #550444, was opened at 2002-04-30 02:35
You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=110590&aid=550444&group_id=10590
Category: ScannerDaemon
Group: None
>Status: Closed
Resolution: None
Priority: 5
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Kurt Huwig (kurti)
Summary: kaffe operation completely broken
Initial Comment:
Hello,
If I run scannerdaemon from kaffe with -nosignature, it
reports a certain file as containing no virus. This
seems to be a problem with kaffe, rather then the
-nosignature option.
If I run it from j2sdk, it reports thew same file as
having the Sircam virus.
Running scannerdaemon with kaffe is required; I have
been told (but not confirmed) that the GPL prevents
distribution of packages that require j2sdk[1][2].
Notes:
[1] Actually this only fixes part of the problem.
Building is also a problem... Last I checked, a number
of classes are required from j2sdk for building.
[2] This could also be fixed if the copyright (and I
mean the copyright, not the COPYING file) is altered to
allow distribution with j2sdk (as an exception to the
requirements of the GPL).
Thanks.
----------------------------------------------------------------------
>Comment By: Kurt Huwig (kurti)
Date: 2002-05-06 14:23
Message:
Logged In: YES
user_id=78306
The problem is due to a bug in kaffe; kaffe cannot
decompress jar files containing plain directory entries,
i.e. what you get when you use 'zip' with the option '-r'. I
tried about 2 hours to get it working, but as soon as the
directory is found, kaffe does not want to read the file any
more. The only solution I found was to unpack the Credo file
and zip it again, giving every file on the command line and
not using the '-r' option.
I can provide sample code to demonstrate the error, it
someone of the kaffe team is willing to fix it. The latest
version of kaffe is from 2000, so I guess development has
stopped?
I will close this bug, as I cannot do anything about it.
----------------------------------------------------------------------
Comment By: Kurt Huwig (kurti)
Date: 2002-04-30 13:51
Message:
Logged In: YES
user_id=78306
The Cryptix-URL is 'www.cryptix.org'.
ScannerDaemon is written for the Java2 plattform and happens
to run with the JRE from Sun. But is does also work with the
one from IBM, I guess. I do not believe that Java software
is generally excluded from being able to be licensed GPL.
----------------------------------------------------------------------
Comment By: Brian May (bmay)
Date: 2002-04-30 11:57
Message:
Logged In: YES
user_id=22449
Hello,
I am just uploading the virus. I am really puzzled with this
bug, I thought that it should either work or not work. kaffe
bug?????? I am using the Debian version 1.0.6-3.
You not the only one with that intepretation of the GPL.
OpenSSL have something similar on their web site. I have
heard that commercial companies like Sun agree too.
However, the Debian interpretation (and I think this is the
FSF's interpretation too, although I am in the process of
clarifying this with them) is that if all the components are
distributed with the operating system (eg. Debian), then the
"unless" part takes affect rendering the special exception void.
Perl is not a problem, because I would assume the licenses
are "compatable". The GPL and j2sdk licenses are definitely
not compatable.
Personally, I am not to worried just yet; but if somebody
complains, the package could get removed from Debian.
However, regardless of the above problems, because j2sdk is
required to compile sacnnerdaemon (and the JCE doesn't
appear to be the only problem, but I can't recall the other
classes required) it can't go into main in Debian. It would
be really good if I could get scannerdaemon to go into main,
and it would really increase the popularity of your program.
Some people really dislike the j2sdk license, although I am
not sure of the exact problems myself.
I haven't heard of the cryptix librarys - do you have a URL
handy?
Thanks.
----------------------------------------------------------------------
Comment By: Kurt Huwig (kurti)
Date: 2002-04-30 11:18
Message:
Logged In: YES
user_id=78306
Please send me the file encrypted with my GPG key, or upload
it to ftp://ftp.rk4.iku-netz.de/incoming/ via anonymous FTP.
For building, you need the cryptography classes (JCE) that
are not included with kaffe. Maybe you can use the ones from
Cryptix; my time is limited, so I cannot do this.
The J2SDK is not _required_ to run ScannerDaemon, so it does
not need to be licensed GPL: "However, as a special
exception, the source code distributed need not include
anything that is normally distributed (in either source or
binary form) with the major components (compiler, kernel,
and so on) of the operating system on which the executable
runs, unless that component itself accompanies the executable."
If you were right, Perl has to be licensend GPL so that GPL
based Perl scripts can be distributed.
----------------------------------------------------------------------
You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=110590&aid=550444&group_id=10590
--=-WJ6Kv0dZMftD1IphTzM5--