ossfuzz.sh is under the Apache 2 license, while the rest of the code is MIT

curl / curl-fuzzer

Quality assurance testing for the curl project

MIT License

82 stars 29 forks source link

ossfuzz.sh is under the Apache 2 license, while the rest of the code is MIT #49

Closed aiuto closed 2 years ago

aiuto commented 2 years ago

https://github.com/curl/curl-fuzzer/blob/master/ossfuzz.sh

has headers saying Apache 2.0 and copyright by Google.
the LICENSE file only says MIT

@cmeister2 Is that intentional, or accidental? I know the name 'ossfuzz.sh' is reused in other projects, but the pattern I am seeing is that each project writes their own script (as did you for curl_fuzzer), so the attribution is to the project.

cmeister2 commented 2 years ago

I don't think that was intentional - it's the same license as ossfuzz use in their Docker files and as https://github.com/google/oss-fuzz/blob/master/projects/curl/build.sh , but that shouldn't hold us to the same license really.

@bagder, assuming you're ok with me changing the license here, I'll alter it to match the standard license for curl.

bagder commented 2 years ago

I'm totally fine with that, yes. Looking at the history of the file, you added it and it certainly looks like your original work and no other contributors, and then you're entitled to change the license just fine.