This file is indexed.

/usr/share/lintian/checks/copyright-file is in lintian 2.5.10.4.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
# copyright-file -- lintian check script -*- perl -*-

# Copyright (C) 1998 Christian Schwarz
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, you can find it on the World Wide
# Web at http://www.gnu.org/copyleft/gpl.html, or write to the Free
# Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,
# MA 02110-1301, USA.

package Lintian::copyright_file;
use strict;
use warnings;

use Lintian::Check qw(check_spelling);
use Lintian::Data ();
use Lintian::Tags qw(tag);
use Lintian::Util qw(fail slurp_entire_file file_is_encoded_in_non_utf8);

use Encode qw(decode);

our $KNOWN_ESSENTIAL = Lintian::Data->new('fields/essential');

sub run {

my $pkg = shift;
my $type = shift;
my $info = shift;
my $proc = shift;
my $group = shift;

my $found = 0;
my $linked = 0;
my $path = "usr/share/doc/$pkg";

if (exists $info->index->{"$path/copyright.gz"}) {
    tag 'copyright-file-compressed';
    $found = 1;
}

if (exists $info->index->{"$path/copyright"}) {
    my $index_info = $info->index->{"$path/copyright"};
    $found = 1;
    if ($index_info->is_symlink) {
        tag 'copyright-file-is-symlink';
        $linked = 1;
        # Fall through here - coll/copyright-file protects us
        # from reading through an "evil" link.
    }
}

if (not $found) {
    my $index_info = $info->index->{$path};
    if (defined $index_info && $index_info->is_symlink) {
        my $link = $index_info->link;

        # check if this symlink references a directory elsewhere
        if ($link =~ m,^(?:\.\.)?/,) {
            tag 'usr-share-doc-symlink-points-outside-of-usr-share-doc', $link;
            return;
        }

        # The symlink may point to a subdirectory of another /usr/share/doc
        # directory.  This is allowed if this package depends on link and both
        # packages come from the same source package.
        #
        # Policy requires that packages be built from the same source if
        # they're going to do this, which by my (rra's) reading means that we
        # should have a strict version dependency.  However, in practice the
        # copyright file doesn't change a lot and strict version dependencies
        # cause other problems (such as with arch: any / arch: all package
        # combinations and binNMUs).
        #
        # We therefore just require the dependency for now and don't worry
        # about the version number.
        $link =~ s,/.*,,;
        if (not depends_on ($info, $link)) {
            tag 'usr-share-doc-symlink-without-dependency', $link;
            return;
        }
        # Check if the link points to a package from the same source.
        check_cross_link ($group, $link);
        return;
    }
}

if (not $found) {
    # #522827: special exception for perl for now
    tag 'no-copyright-file'
      unless $pkg eq 'perl';
}

# check that copyright is UTF-8 encoded
my $line = file_is_encoded_in_non_utf8('copyright', $type, $pkg);
if ($line) {
    tag 'debian-copyright-file-uses-obsolete-national-encoding', "at line $line"
}

# check contents of copyright file
$_ = slurp_entire_file('copyright');
study $_;

if (m,\r,) {
    tag 'copyright-has-crs';
}

my $wrong_directory_detected = 0;

if (m,(usr/share/common-licenses/(?:GPL|LGPL|BSD|Artistic)\.gz),) {
    tag 'copyright-refers-to-compressed-license', $1;
}

# Avoid complaining about referring to a versionless license file if the word
# "version" appears nowhere in the copyright file.  This won't catch all of
# our false positives for GPL references that don't include a specific version
# number, but it will get the obvious ones.
if (m,(usr/share/common-licenses/(L?GPL|GFDL))([^-]),i) {
    my ($ref, $license, $separator) = ($1, $2, $3);
    if ($separator =~ /[\d\w]/) {
        tag 'copyright-refers-to-nonexistent-license-file', "$ref$separator";
    } elsif (m,\b(?:any|or)\s+later(?:\s+version)?\b,i
             || m,License: $license-[\d\.]+\+,i
             || m,as Perl itself,i
             || m,License-Alias:\s+Perl,
             || m,License:\s+Perl,) {
        tag 'copyright-refers-to-symlink-license', $ref;
    } else {
        tag 'copyright-refers-to-versionless-license-file', $ref
            if /\bversion\b/;
    }
}

# References to /usr/share/common-licenses/BSD are deprecated as of Policy
# 3.8.5.
if (m,/usr/share/common-licenses/BSD,) {
    tag 'copyright-refers-to-deprecated-bsd-license-file';
}

if (m,(usr/share/common-licences),) {
    tag 'copyright-refers-to-incorrect-directory', $1;
    $wrong_directory_detected = 1;
}

if (m,usr/share/doc/copyright,) {
    tag 'copyright-refers-to-old-directory';
    $wrong_directory_detected = 1;
}

if (m,usr/doc/copyright,) {
    tag 'copyright-refers-to-old-directory';
    $wrong_directory_detected = 1;
}

# Lame check for old FSF zip code.  Try to avoid false positives from other
# Cambridge, MA addresses.
if (m/(?:Free\s*Software\s*Foundation.*02139|02111-1307)/s) {
    tag 'old-fsf-address-in-copyright-file';
}

# Whether the package is covered by the GPL, used later for the libssl check.
my $gpl;

if (length($_) > 12_000
    and (m/\bGNU GENERAL PUBLIC LICENSE\s*TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION\b/m
         or (m/\bGNU GENERAL PUBLIC LICENSE\s*Version 3/ and m/\bTERMS AND CONDITIONS\s/))) {
    tag 'copyright-file-contains-full-gpl-license';
    $gpl = 1;
}

if (length($_) > 12_000
    and m/\bGNU Free Documentation License\s*Version 1\.2/ and m/\b1\. APPLICABILITY AND DEFINITIONS/) {
    tag 'copyright-file-contains-full-gfdl-license';
}

if (length($_) > 10_000
    and m/\bApache License\s+Version 2\.0,/
    and m/TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION/) {
    tag 'copyright-file-contains-full-apache-2-license';
}

# wtf?
if ((m,common-licenses(/\S+),) && (! m,/usr/share/common-licenses/,)) {
    tag 'copyright-does-not-refer-to-common-license-file', $1;
}

# This check is a bit prone to false positives, since some other licenses
# mention the GPL.  Also exclude any mention of the GPL following what looks
# like mail headers, since sometimes e-mail discussions of licensing are
# included in the copyright file but aren't referring to the license of the
# package.
if (m,/usr/share/common-licenses,
    || m/Zope Public License/
    || m/LICENSE AGREEMENT FOR PYTHON 1.6.1/
    || m/LaTeX Project Public License/
    || m/(?:^From:.*^To:|^To:.*^From:).*(?:GNU General Public License|GPL)/ms
    || m/AFFERO GENERAL PUBLIC LICENSE/
    || m/GNU Free Documentation License[,\s]*Version 1\.1/
    || m/CeCILL FREE SOFTWARE LICENSE AGREEMENT/ #v2.0
    || m/FREE SOFTWARE LICENSING AGREEMENT CeCILL/ #v1.1
    || m/CNRI OPEN SOURCE GPL-COMPATIBLE LICENSE AGREEMENT/
    || m/compatible\s+with\s+(?:the\s+)?(?:GNU\s+)?GPL/
    || m/(?:GNU\s+)?GPL\W+compatible/
    || m/was\s+previously\s+(?:distributed\s+)?under\s+the\s+GNU/
    || $wrong_directory_detected) {
    # False positive or correct reference.  Ignore.
} elsif (m/GNU Free Documentation License/i or m/\bGFDL\b/) {
    tag 'copyright-should-refer-to-common-license-file-for-gfdl';
} elsif (m/GNU (?:Lesser|Library) General Public License/i or m/\bLGPL\b/) {
    tag 'copyright-should-refer-to-common-license-file-for-lgpl';
} elsif (m/GNU General Public License/i or m/\bGPL\b/) {
    tag 'copyright-should-refer-to-common-license-file-for-gpl';
    $gpl = 1;
}
if (m,(?:under )?(?:the )?(?:same )?(?:terms )?as Perl itself,i &&
    !m,usr/share/common-licenses/,) {
    tag 'copyright-file-lacks-pointer-to-perl-license';
}

# Checks for various packaging helper boilerplate.

if (m,\<fill in (?:http/)?ftp site\>,o or
    m,\<Must follow here\>,o or
    m,\<Put the license of the package here,o or
    m,\<put author[\'\(]s\)? name and email here\>,o or
    m,\<Copyright \(C\) YYYY Name OfAuthor\>,o or
    m,Upstream Author\(s\),o or
    m,\<years\>,o or
    m,\<special license\>,o or
    m,\<Put the license of the package here indented by 1 space\>,o or
    m,\<This follows the format of Description: lines in control file\>,o or
    m,\<Including paragraphs\>,o or
    m,\<likewise for another author\>,o) {
    tag 'helper-templates-in-copyright';
}

if (m/This copyright info was automatically extracted/o) {
    tag 'copyright-contains-dh-make-perl-boilerplate';
}

if (m,url://,o) {
    tag 'copyright-has-url-from-dh_make-boilerplate';
}

if (m{\# Please also look if there are files or directories which have a\n\# different copyright/license attached and list them here\.}o, or
    m{\# If you want to use GPL v2 or later for the /debian/\* files use\n\# the following clauses, or change it to suit. Delete these two lines}o) {
    tag 'copyright-contains-dh_make-todo-boilerplate';
}

if (m,The\s+Debian\s+packaging\s+is\s+\(C\)\s+\d+,io) {
    tag 'copyright-with-old-dh-make-debian-copyright';
}

# Bad licenses.
if (m/The\s+PHP\s+Licen[cs]e,?\s+version\s+2/si) {
    tag 'copyright-refers-to-bad-php-license';
}
if (m/The\s+PHP\s+Licen[cs]e,?\s+version\s+3\.0[^\d]/si) {
    tag 'copyright-refers-to-problematic-php-license';
}

# Other flaws in the copyright phrasing or contents.

if ($found && !$linked && !/(?:Copyright|Copr\.|\302\251)(?:.*|[\(C\):\s]+)\b\d{4}\b|\bpublic\s+domain\b/i) {
    tag 'copyright-without-copyright-notice';
}

check_spelling('spelling-error-in-copyright', $_, undef, { $pkg => 1 });

# Now, check for linking against libssl if the package is covered by the GPL.
# (This check was requested by ftp-master.)  First, see if the package is
# under the GPL alone and try to exclude packages with a mix of GPL and LGPL
# or Artistic licensing or with an exception or exemption.
if ($gpl || m,/usr/share/common-licenses/GPL,) {
    unless (m,exception|exemption|/usr/share/common-licenses/(?!GPL)\S,) {
        my @depends;
        if (defined $info->field('depends')) {
            @depends = split (/\s*,\s*/, scalar $info->field('depends'));
        }
        if (defined $info->field('pre-depends')) {
            push @depends, split (/\s*,\s*/, scalar $info->field('pre-depends'));
        }
        if (grep { /^libssl[0-9.]+(?:\s|\z)/ && !/\|/ } @depends) {
            tag 'possible-gpl-code-linked-with-openssl';
        }
    }
}

} # </run>

# -----------------------------------

# Returns true if the package whose information is in $info depends $package
# or if $package is essential.
sub depends_on {
    my ($info, $package) = @_;
    return 1 if $KNOWN_ESSENTIAL->known($package);
    return 1 if $info->relation('strong')->implies($package);
    return 0;
}

# Checks cross pkg links for /usr/share/doc/$pkg links
sub check_cross_link {
    my ($group, $fpkg) = @_;
    my $src = $group->get_source_processable();
    if ( $src ) {
        # source package is available; check it's list of binary
        my $bin = $src->info->binaries;
        return if $bin->{$fpkg};
        tag 'usr-share-doc-symlink-to-foreign-package', $fpkg;
    } else {
        # The source package is not available, but the binary could
        # be present anyway;  If they are in the same group, they claim
        # to have the same source (and source version)
        foreach my $proc ($group->get_processables('binary')){
            return if($proc->pkg_name eq $fpkg);
        }
        # It was not, but since the source package was not present, we cannot
        # tell if it is foreign or not at this point.
        tag 'cannot-check-whether-usr-share-doc-symlink-points-to-foreign-package';
    }
}

1;

# Local Variables:
# indent-tabs-mode: nil
# cperl-indent-level: 4
# End:
# vim: syntax=perl sw=4 sts=4 sr et