Conversation

Notices

1. Embed this notice
   Drew DeVault (drewdevault@fosstodon.org)'s status on Wednesday, 27-Mar-2024 04:25:50 JST Drew DeVault

   Say I build a website which lets you browse the Linux kernel source code. The website includes a script which is distributed with the CDDL license. You're working on modifying Firefox for use in Debian, but you haven't changed the name. You're viewing this website when your modified version of Firefox crashes.

   You're asked to share the core dump when you report the bug. What is the license of the code dump file?

   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Wednesday, 27-Mar-2024 04:26:41 JST Haelwenn /элвэн/ :triskell:

     in reply to
     @drewdevault It ends up under the What The Fuck Private License
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Wednesday, 27-Mar-2024 04:31:10 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Moritz Poldrack :arch:
     @mpldr @drewdevault coredumps by very definition include a copy of the program in memory at the time of the crash.
     So not really comparable to an image where you typically could create the exact same file with an an entirely different program sharing no code with the other one.
   • Embed this notice
     Moritz Poldrack :arch: (mpldr@fosstodon.org)'s status on Wednesday, 27-Mar-2024 04:31:11 JST Moritz Poldrack :arch:

     in reply to

     @drewdevault assuming this would reach the level of licensable, which I don't think is the case, whatever license you give it. If you create an image using the GPL, its not automatically GPL. In the same way the license of the generated dump is not affected by the crashing program.

   • Embed this notice
     Moritz Poldrack :arch: (mpldr@fosstodon.org)'s status on Wednesday, 27-Mar-2024 05:52:00 JST Moritz Poldrack :arch:

     in reply to

     • Haelwenn /элвэн/ :triskell:

     @lanodan @drewdevault they very much do not. They contain the process memory, not the process binary. Hence the need for the binary path when working with them. Without the binary, you'd hardly get anything of value out of them. I do not know if it contains the loaded instructions at time of the signal, but even that could hardly be called a redistribution.

   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Wednesday, 27-Mar-2024 05:52:00 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Moritz Poldrack :arch:
     @mpldr @drewdevault Looking in my coredumps… you're right, got mislead from when I was spelunking in coredumps of interpreters (where JIT-compiled program and/or the whole script can end up in the coredump), could still be somewhat relevant for Firefox given JavaScript but that would need to be checked I guess.
     
     And same binary requirement means unless it was compiled in a reproducible environment (possible for debian), you'd need to provide the binary anyway.