\section{The GNU General Public License, Version 3}

RMS began drafting GPLv2.2 in mid-2002, and FSF ran a few discussion groups

during that era about new text of that license.  However, rampant violations

of the GPL required more immediate attention of FSF's licensing staff, and as

such, much of the early 2000's was spent doing GPL enforcement

work\footnote{More on GPL enforcement is discussed in \tutorialpartsplit{a

    companion tutorial, \textit{A Practical Guide to GPL

      Compliance}}{Part~\ref{gpl-compliance-guide} of this tutorial}.}.  In

2006, FSF began in earnest drafting work for GPLv3.

The GPLv3 process began in earnest in January 2006.  It became clear that

many provisions of the GPL could benefit from modification to fit new

circumstances and to reflect what the entire community learned from

experience with version 2.  Given the scale of revision it seems proper to

approach the work through public discussion in a transparent and accessible

manner.

The GPLv3 process continued through June 2007, culminating in publication of

GPLv3 and LGPLv3 on 29 June 2007, AGPLv3 on 19 November 2007, and the GCC

Runtime Library Exception on 27 January 2009.

All told, four discussion drafts of GPLv3, two discussion drafts of LGPLv3

and two discussion drafts of AGPLv3 were published and discussed.

Ultimately, FSF remained the final arbiter and publisher of the licenses, and

RMS himself their primary author, but input was sought from many parties, and

these licenses do admittedly look and read more like legislation as a result.

Nevertheless, all of the ``v3'' group are substantially better and improved

licenses.

GPLv3 and its terms are discussed in detail in Chapter\~ref{GPLv3}.

\section{The Innovation of Optional ``Or Any Later'' Version}

An interesting fact of all GPL licenses is that the are ultimate multiple

choices for use of the license.  The FSF is the primary steward of GPL (as

discussed later in \S~\ref{GPLv2s9} and \S~\ref{GPLv2s14}).  However, those

who wish to license works under GPL are not required to automatically accept

changes made by the FSF for their own copyrighted works.

Each licensor may chose three different methods of licensing, as follows:

\begin{itemize}

\item explicitly name a single version of GPL for their work (usually

  indicated in shorthand by saying the license is ``GPLv$X$-only''), or

\item name no version of the GPL, thus they allow their downstream recipients

  to select any version of the GPL they chose (usually indicated in shorthand

  by saying the license is simply ``GPL''), or

\item name a specific version of GPL and give downstream recipients the

  option to chose that version ``or any later version as published by the

  FSF'' (usually indicated by saying the license is

  ``GPLv$X$-or-later'')\footnote{The shorthand of ``GPL$X+$'' is also popular

    for this situation.  The authors of this tutorial prefer ``-or-later''

    syntax, because it (a) mirrors the words ``or'' and ``later from the

    licensing statement, (b) the $X+$ doesn't make it abundantly clear that

    $X$ is clearly included as a license option and (c) the $+$ symbol has

    other uses in computing (such as with regular expressions) that mean

    something different.}

\end{itemize}

\label{license-compatibility-first-mentioned}

Oddly, this flexibility has received (in the opinion of the authors, undue)

criticism, primarily because of the complex and oft-debated notion of

``license compatibility'' (which is explained in detail in

\S~\ref{license-compatibility}).  Copyleft licenses are generally

incompatible with each other, because the details of how they implement

copyleft differs.  Specifically, copyleft works only because of its

requirement that downstream licensors use the \textit{same} license for

combined and modified works.  As such, software licensed under the terms of

``GPLv2-only'' cannot be combined with works licensed ``GPLv3-or-later''.

This is admittedly a frustrating outcome.

Other copyleft licenses that appeared after GPL, such

as the Creative Commons ``Share Alike'' licenses, the Eclipse Public License

and the Mozilla Public License \textbf{require} all copyright holders chosing

to use any version of those licenses to automatically accept and relicense

their copyrighted works under new versions.  Of course ,Creative Commons, the

Eclipse Foundation, and the Mozilla Foundation (like the FSF) have generally

served as excellent stewards of their licenses.  Copyright holders using

those licenses seems to find it acceptable that to fully delegate all future

licensing decisions for their copyrights to these organizations without a

second thought.

However, note that FSF gives herein the control of copyright holders to

decide whether or not to implicitly trust the FSF in its work of drafting

future GPL versions.  The FSF, for its part, does encourage copyright holders

to chose by default ``GPLv$X$-or-later'' (where $X$ is the most recent

version of the GPL published by the FSF).  However, the FSF \textbf{does not

  mandate} that a choice to use any GPL requires a copyright holder ceding

its authority for future licensing decisions to the FSF.  In fact, the FSF

considered this possibility for GPLv3 and chose not to do so, instead opting

for the third-party steward designation clause discussed in

\section{Complexities of Two Simultaneously Popular Copylefts}

Obviously most GPL advocates would prefer widespread migration to GPLv3, and

many newly formed projects who seek a copyleft license tend to choose a

GPLv3-based license.  However, many existing copylefted projects continue

with GPLv2-only or GPLv2-or-later as their default license.

While GPLv3 introduces many improvements --- many of which were designed to

increase adoption by for-profit companies --- GPLv2 remains a widely used and

extremely popular license.  The GPLv2 is, no doubt, a good and useful

license.

However, unlike GPLv1, which (as pointed out in \S~\ref{GPLv1}), which is

completely out of use by the mid-1990s.  However, unlike GPLv1 before it,

GPLv2 remains a integral part of the copyleft licensing infrastructure for

some time to come.  As such, those who seek to have expertise in current

topics of copyleft licensing need to study both the GPLv2 and GPLv3 family of

licenses.

Furthermore, GPLv3 can is more easily understood by first studying GPLv2.

This is not only because of their chronological order, but also because much

of the discussion material available for GPLv3 tends to talk about GPLv3 in

contrast to GPLv2.  As such, a strong understanding of GPLv2 helps in

understanding most of the third-party material found regarding GPLv3.  Thus,

the following chapter begins a deep discussion of GPLv2.

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

\chapter{GPLv2: Running Software and Verbatim Copying}

\label{run-and-verbatim}

This chapter begins the deep discussion of the details of the terms of

GPLv2\@. In this chapter, we consider the first two sections: GPLv2 \S\S

0--2. These are the straightforward sections of the GPL that define the

simplest rights that the user receives.

\section{GPLv2~\S0: Freedom to Run}

\label{GPLv2s0}

GPLv2~\S0, the opening section of GPLv2, sets forth that the copyright law governs

the work.  It specifically points out that it is the ``copyright

holder'' who decides if a work is licensed under its terms and explains

how the copyright holder might indicate this fact.

A bit more subtly, GPLv2~\S0 makes an inference that copyright law is the only

system that can restrict the software.  Specifically, it states:

\begin{quote}

Activities other than copying, distribution and modification are not

covered by this License; they are outside its scope.

\end{quote}

In essence, the license governs \emph{only} those activities, and all other

activities are unrestricted, provided that no other agreements trump GPLv2

(which they cannot; see Sections~\ref{GPLv2s6} and~\ref{GPLv2s7}).  This is

very important, because the Free Software community heavily supports

users' rights to ``fair use'' and ``unregulated use'' of copyrighted

material.  GPLv2 asserts through this clause that it supports users' rights

to fair and unregulated uses.

Fair use (called ``fair dealing'' in some jurisdictions) of copyrighted

material is an established legal doctrine that permits certain activities

regardless of whether copyright law would other restrict those activities.

Discussion of the various types of fair use activity are beyond the scope of

this tutorial.  However, one important example of fair use is the right to

quote portions of the text in larger work so as to criticize or suggest

changes.  This fair use rights is commonly used on mailing lists when

discussing potential improvements or changes to Free Software.

Fair use is a doctrine established by the courts or by statute.  By

contrast, unregulated uses are those that are not covered by the statue

nor determined by a court to be covered, but are common and enjoyed by

many users.  An example of unregulated use is reading a printout of the

program's source code like an instruction book for the purpose of learning

how to be a better programmer.  The right to read something that you have

access is and should remain unregulated and unrestricted.

\medskip

Thus, the GPLv2 protects users fair and unregulated use rights precisely by

not attempting to cover them.  Furthermore, the GPLv2 ensures the freedom

to run specifically by stating the following:

\begin{quote}

''The act of running the Program is not restricted.''

\end{quote}

Thus, users are explicitly given the freedom to run by GPLv2~\S0.

\medskip

The bulk of GPLv2~\S0 not yet discussed gives definitions for other terms used

throughout.  The only one worth discussing in detail is ``work based on

the Program''.  The reason this definition is particularly interesting is

not for the definition itself, which is rather straightforward, but

because it clears up a common misconception about the GPL\@.

The GPL is often mistakenly criticized because it fails to give a

definition of ``derivative work''.  In fact, it would be incorrect and

``broad'' protection requires only a ``substantial similarity.''

\section{No Protection for ``Methods of Operation''}

The First Circuit has taken the position that the AFC test is inapplicable 

when the works in question relate to unprotectable elements set forth in 

\S~102(b).  Their approach results in a much narrower definition

of derivative work for software in comparison to other circuits. Specifically, 

the

First Circuit holds that ``method of operation,'' as used in \S~102(b) of

the Copyright Act, refers to the means by which users operate

computers. Lotus Development Corp. v. Borland Int’l., Inc., 49 F.3d 807

(1st Cir. 1995).  In Lotus, the court held that a menu command

hierarchy for a computer program was uncopyrightable because it did not

merely explain and present the program’s functional capabilities to the

user, but also served as a method by which the program was operated and

controlled. As a result, under the First Circuit’s test, literal copying

of a menu command hierarchy, or any other ``method of operation,'' cannot

form the basis for a determination that one work is a derivative of

another.  As a result, courts in the First Circuit that apply the AFC test

do so only after applying a broad interpretation of \S~102(b) to filter out

unprotected elements. E.g., Real View, LLC v. 20-20 Technologies, Inc., 

683 F. Supp.2d 147, 154 (D. Mass. 2010).

\section{No Test Yet Adopted}

Several circuits, most notably the Fourth and Seventh, have yet to

declare their definition of derivative work and whether or not the

AFC, Analytic Dissection, or some other test best fits their

interpretation of copyright law. Therefore, uncertainty exists with

respect to determining the extent to which a software program is a

derivative work of another in those circuits. However, one may presume

that they would give deference to the AFC test since it is by far the

majority rule amongst those circuits that have a standard for defining

a software derivative work.

\section{Cases Applying Software Derivative Work Analysis}

In the preeminent case regarding the definition of a derivative work for

software, Computer Associates v. Altai, the plaintiff alleged that its

program, Adapter, which was used to handle the differences in operating

system calls and services, was infringed by the defendant's competitive

program, Oscar. About 30\% of Oscar was literally the same code as

that in Adapter. After the suit began, the defendant rewrote those

portions of Oscar that contained Adapter code in order to produce a new

version of Oscar that was functionally competitive with Adapter, without

have any literal copies of its code. Feeling slighted still, the

plaintiff alleged that even the second version of Oscar, despite having no

literally copied code, also infringed its copyrights. In addressing that

question, the Second Circuit promulgated the AFC test.

In abstracting the various levels of the program, the court noted a

similarity between the two programs' parameter lists and macros. However,

following the filtration step of the AFC test, only a handful of the lists

and macros were protectable under copyright law because they were either

in the public domain or required by functional demands on the

program. With respect to the handful of parameter lists and macros that

did qualify for copyright protection, after performing the comparison step

of the AFC test, it was reasonable for the district court to conclude that

they did not warrant a finding of infringement given their relatively minor

contribution to the program as a whole. Likewise, the similarity between

the organizational charts of the two programs was not substantial enough

to support a finding of infringement because they were too simple and

obvious to contain any original expression.

In the case of Oracle America v. Google, 872 F. Supp.2d 974 (N.D. Cal. 2012),

the Northern District of California District Court examined the question of 

whether the application program interfaces (APIs) associated with the Java

programming language are entitled to copyright protection.  While the 

court expressly declined to rule whether all APIs are free to use without 

license (872 F. Supp.2d 974 at 1002), the court held that the command 

structure and taxonomy of the APIs were not protectable under copyright law.

Specifically, the court characterized the command structure and taxonomy as

both a ``method of operation'' (using an approach not dissimilar to the 

First Circuit's analysis in Lotus) and a ``functional requirement for 

compatability'' (using Sega v. Accolade, 977 F.2d 1510 (9th Cir. 1992) and

Sony Computer Ent. v. Connectix, 203 F.3d 596 (9th Cir. 2000) as analogies),

and thus unprotectable subject matter under \S~102(b). 

Perhaps not surprisingly, there have been few other cases involving a highly

detailed software derivative work analysis. Most often, cases involve

clearer basis for decision, including frequent bad faith on the part of

the defendant or overaggressiveness on the part of the plaintiff.  

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

\chapter{Modified Source and Binary Distribution}

\label{source-and-binary}

In this chapter, we discuss the two core sections that define the rights

and obligations for those who modify, improve, and/or redistribute GPL'd

software. These sections, GPLv2~\S\S2--3, define the central core rights and

requirements of GPLv2\@.

\section{GPLv2~\S2: Share and Share Alike}

For many, this is where the ``magic'' happens that defends software

freedom upon redistribution.  GPLv2~\S2 is the only place in GPLv2

that governs the modification controls of copyright law.  If users

modifies a GPLv2'd program, they must follow the terms of GPLv2~\S2 in making

those changes.  Thus, this sections ensures that the body of GPL'd software, as it

continues and develops, remains Free as in freedom.

To achieve that goal, GPLv2~\S2 first sets forth that the rights of

redistribution of modified versions are the same as those for verbatim

copying, as presented in GPLv2~\S1.  Therefore, the details of charging money,

keeping copyright notices intact, and other GPLv2~\S1 provisions are in tact

here as well.  However, there are three additional requirements.

The first (GPLv2~\S2(a)) requires that modified files carry ``prominent

notices'' explaining what changes were made and the date of such

changes. This section does not prescribe some specific way of

marking changes nor does it control the process of how changes are made.

Primarily, GPLv2~\S2(a) seeks to ensure that those receiving modified

versions know the history of changes to the software.  For some users,

it is important to know that they are using the standard version of

program, because while there are many advantages to using a fork,

there are a few disadvantages.  Users should be informed about the

historical context of the software version they use, so that they can

make proper support choices.  Finally, GPLv2~\S2(a) serves an academic

purpose --- ensuring that future developers can use a diachronic

approach to understand the software.

\medskip

The second requirement (GPLv2~\S2(b)) contains the four short lines that embody

the legal details of ``share and share alike''.  These 46 words are

considered by some to be the most worthy of careful scrutiny because

GPLv2~\S2(b), and they

can be a source of great confusion when not properly understood.

In considering GPLv2~\S2(b), first note the qualifier: it \textit{only} applies to

derivative works that ``you distribute or publish''.  Despite years of

education efforts on this matter, many still believe that modifiers

of GPL'd software \textit{must} to publish or otherwise

share their changes.  On the contrary, GPLv2~\S2(b) {\bf does not apply if} the

changes are never distributed.  Indeed, the freedom to make private,

personal, unshared changes to software for personal use only should be

protected and defended.\footnote{Most Free Software enthusiasts believe there is an {\bf

    moral} obligation to redistribute changes that are generally useful,

  and they often encourage companies and individuals to do so.  However, there

  is a clear distinction between what one {\bf ought} to do and what one

  {\bf must} do.}

Next, we again encounter the same matter that appears in GPLv2~\S0, in the

following text:

\begin{quote}

``...that in whole or part contains or is derived from the Program or any part thereof.''

\end{quote}

Again, the GPL relies here on what the copyright law says is a derivative

work.  If, under copyright law, the modified version ``contains or is

derived from'' the GPL'd software, then the requirements of GPLv2~\S2(b)

apply.  The GPL invokes its control as a copyright license over the

modification of the work in combination with its control over distribution

of the work.

The final clause of GPLv2~\S2(b) describes what the licensee must do if she is

distributing or publishing a work that is deemed a derivative work under

copyright law --- namely, the following:

\begin{quote}

[The work must] be licensed as a whole at no charge to all third parties

under the terms of this License.

\end{quote}

That is probably the most tightly-packed phrase in all of the GPL\@.

Consider each subpart carefully.

The work ``as a whole'' is what is to be licensed. This is an important

point that GPLv2~\S2 spends an entire paragraph explaining; thus this phrase is

worthy of a lengthy discussion here.  As a programmer modifies a software

program, she generates new copyrighted material --- fixing expressions of

ideas into the tangible medium of electronic file storage.  That

programmer is indeed the copyright holder of those new changes.  However,

those changes are part and parcel to the original work distributed to

the programmer under GPL\@. Thus, the license of the original work

affects the license of the new whole derivative work.

% {\cal I}

\newcommand{\gplusi}{$\mathcal{G\!\!+\!\!I}$}

\newcommand{\worki}{$\mathcal{I}$}

\newcommand{\workg}{$\mathcal{G}$}

\label{separate-and-independent}

It is certainly possible to take an existing independent work (called

\worki{}) and combine it with a GPL'd program (called \workg{}).  The

license of \worki{}, when it is distributed as a separate and independent

work, remains the prerogative of the copyright holder of \worki{}.

However, when \worki{} is combined with \workg{}, it produces a new work

that is the combination of the two (called \gplusi{}). The copyright of

this combined work, \gplusi{}, is held by the original copyright

holder of each of the two works.

In this case, GPLv2~\S2 lays out the terms by which \gplusi{} may be

distributed and copied.  By default, under copyright law, the copyright

holder of \worki{} would not have been permitted to distribute \gplusi{};

copyright law forbids it without the expressed permission of the copyright

holder of \workg{}. (Imagine, for a moment, if \workg{} were a proprietary

product --- would its copyright holders  give you permission to create and distribute

\gplusi{} without paying them a hefty sum?)  The license of \workg{}, the

GPL, states the  options for the copyright holder of \worki{}

who may want to create and distribute \gplusi{}.  GPL's pregranted

permission to create and distribute derivative works, provided the terms

of GPL are upheld, goes far above and beyond the permissions that one

would get with a typical work not covered by a copyleft license.  (Thus, to

say that this restriction is any way unreasonable is simply ludicrous.)

\medskip

The next phrase of note in GPLv2~\S2(b) is ``licensed \ldots at no charge.''

This phrase  confuses many.  The sloppy reader points out this as ``a

contradiction in GPL'' because (in their confused view) that clause of GPLv2~\S2 says that redistributors cannot

charge for modified versions of GPL'd software, but GPLv2~\S1 says that

they can.  Avoid this confusion: the ``at no charge'' \textbf{does not} prohibit redistributors from

charging when performing the acts governed by copyright

law,\footnote{Recall that you could by default charge for any acts not

governed by copyright law, because the license controls are confined

by copyright.} but rather that they cannot charge a fee for the

\emph{license itself}.  In other words, redistributors of (modified

and unmodified) GPL'd works may charge any amount they choose for

performing the modifications on contract or the act of transferring

the copy to the customer, but they may not charge a separate licensing

fee for the software.

GPLv2~\S2(b) further states that the software must ``be licensed \ldots to all

third parties.''  This too yields some confusion, and feeds the

misconception mentioned earlier --- that all modified versions must made

available to the public at large.  However, the text here does not say

that.  Instead, it says that the licensing under terms of the GPL must

extend to anyone who might, through the distribution chain, receive a copy

of the software.  Distribution to all third parties is not mandated here,

but GPLv2~\S2(b) does require redistributors to license the derivative works in

a way that extends to all third parties who may ultimately receive a

copy of the software.

In summary, GPLv2\ 2(b) says what terms under which the third parties must

receive this no-charge license.  Namely, they receive it ``under the terms

of this License'', the GPLv2.  When an entity \emph{chooses} to redistribute

a derivative work of GPL'd software, the license of that whole 

work must be GPL and only GPL\@.  In this manner, GPLv2~\S2(b) dovetails nicely

with GPLv2~\S6 (as discussed in Section~\ref{GPLv2s6} of this tutorial).

\medskip

The final paragraph of GPLv2~\S2 is worth special mention.  It is possible and

quite common to aggregate various software programs together on one

distribution medium.  Computer manufacturers do this when they ship a

pre-installed hard drive, and GNU/Linux distribution vendors do this to

give a one-stop CD or URL for a complete operating system with necessary

applications.  The GPL very clearly permits such ``mere aggregation'' with

programs under any license.  Despite what you hear from its critics, the

GPL is nothing like a virus, not only because the GPL is good for you and

a virus is bad for you, but also because simple contact with a GPL'd

code-base does not impact the license of other programs.  A programmer must

expended actual effort  to cause a work to fall under the terms

of the GPL.  Redistributors are always welcome to simply ship GPL'd

software alongside proprietary software or other unrelated Free Software,

as long as the terms of GPL are adhered to for those packages that are

truly GPL'd.

\section{GPLv2~\S3: Producing Binaries}

Software is a strange beast when compared to other copyrightable works.

It is currently impossible to make a film or a book that can be truly

obscured.  Ultimately, the full text of a novel, even one written by

William Faulkner, must presented to the reader as words in some

human-readable language so that they can enjoy the work.  A film, even one

directed by David Lynch, must be perceptible by human eyes and ears to

have any value.

Software is not so.  While the source code --- the human-readable

representation of software is of keen interest to programmers -- users and

programmers alike cannot make the proper use of software in that

human-readable form.  Binary code --- the ones and zeros that the computer

can understand --- must be predicable and attainable for the software to

be fully useful.  Without the binaries, be they in object or executable

form, the software serves only the didactic purposes of computer science.

Under copyright law, binary representations of the software are simply

derivative works of the source code.  Applying a systematic process (i.e.,

``compilation''\footnote{``Compilation'' in this context refers to the

  automated computing process of converting source code into binaries.  It

  has absolutely nothing to do with the term ``compilation'' in copyright statues.}) to a work of source code yields binary code. The binary

code is now a new work of expression fixed in the tangible medium of

electronic file storage.

Therefore, for GPL'd software to be useful, the GPL, since it governs the

rules for creation of derivative works, must grant permission for the

generation of binaries.  Furthermore, notwithstanding the relative

popularity of source-based GNU/Linux distributions like Gentoo, users find

it extremely convenient to receive distribution of binary software.  Such

distribution is the redistribution of derivative works of the software's

source code.  GPLv2~\S3 addresses the matter of creation and distribution of

binary versions.

Under GPLv2~\S3, binary versions may be created and distributed under the

terms of GPLv2~\S1--2, so all the material previously discussed applies

here.  However, GPLv2~\S3 must go a bit further.  Access to the software's

source code is an incontestable prerequisite for the exercise of the

fundamental freedoms to modify and improve the software.  Making even

the most trivial changes to a software program at the binary level is

effectively impossible.  GPLv2~\S3 must ensure that the binaries are never

distributed without the source code, so that these freedoms are passed

through the distribution chain.

GPLv2~\S3 permits distribution of binaries, and then offers three options for

distribution of source code along with binaries. The most common and the

least complicated is the option given under GPLv2~\S3(a).

GPLv2~\S3(a) offers the option to directly accompany the source code alongside

the distribution of the binaries.  This is by far the most convenient

option for most distributors, because it means that the source-code

provision obligations are fully completed at the time of binary

distribution (more on that later).

Under GPLv2~\S3(a), the source code provided must be the ``corresponding source

code.''  Here ``corresponding'' primarily means that the source code

provided must be that code used to produce the binaries being distributed.

That source code must also be ``complete''.   GPLv2~\S3's penultimate paragraph

explains in detail what is meant by ``complete''.  In essence, it is all

the material that a programmer of average skill would need to actually use

the source code to produce the binaries she has received.  Complete source

is required so that, if the licensee chooses, she should be able to

exercise her freedoms to modify and redistribute changes.  Without the

complete source, it would not be possible to make changes that were

actually directly derived from the version received.

Furthermore, GPLv2~\S3 is defending against a tactic that has in fact been

seen in GPL enforcement.  Under GPL, if you pay a high price for

a copy of GPL'd binaries (which comes with corresponding source, of

course), you have the freedom to redistribute that work at any fee you

choose, or not at all.  Sometimes, companies attempt a GPL-violating

cozenage whereby they produce very specialized binaries (perhaps for

an obscure architecture).  They then give source code that does

correspond, but withhold the ``incantations'' and build plans they

used to make that source compile into the specialized binaries.

Therefore, GPLv2~\S3 requires that the source code include ``meta-material'' like

scripts, interface definitions, and other material that is used to

``control compilation and installation'' of the binaries.  In this

manner, those further down the distribution chain are assured that

they have the unabated freedom to build their own derivative works

from the sources provided.

Software distribution comes in many

forms.  Embedded manufacturers, for example, have the freedom to put

GPL'd software into mobile devices with very tight memory and space

constraints.  In such cases, putting the source right alongside the

binaries on the machine itself might not be an option.  While it is

recommended that this be the default way that people comply with GPL, the

GPL does provide options when such distribution is infeasible.

GPLv2~\S3, therefore, allows source code to be provided on any physical

``medium customarily used for software interchange.''  By design, this

phrase covers a broad spectrum --- the phrase seeks to pre-adapt to

changes in  technology.  When GPLv22 was first published in June

1991, distribution on magnetic tape was still common, and CD was

relatively new.  By 2002, CD is the default.  By 2007, DVD's were the

default.  Now, it's common to give software on USB drives and SD card.  This

language in the license must adapt with changing technology.

Meanwhile, the binding created by the word ``customarily'' is key.  Many

incorrectly believe that distributing binary on CD and source on the

Internet is acceptable.  In the corporate world in industrialized countries, it is indeed customary to

simply download a CDs' worth of data quickly.  However, even today in the USA, many computer users are not connected to the Internet, and most people connected

to the Internet still have limited download speeds.  Downloading

CDs full of data is not customary for them in the least.  In some cities

in Africa, computers are becoming more common, but Internet connectivity

is still available only at a few centralized locations.  Thus, the

``customs'' here are normalized for a worldwide userbase.  Simply

providing source on the Internet --- while it is a kind, friendly and

useful thing to do --- is not usually sufficient.

Note, however, a major exception to this rule, given by the last paragraph

of GPLv2~\S3. \emph{If} distribution of the binary files is made only on the

Internet (i.e., ``from a designated place''), \emph{then} simply providing

the source code right alongside the binaries in the same place is

sufficient to comply with GPLv2~\S3.

\medskip

As is shown above, Under GPLv2~\S3(a), embedded manufacturers can put the

binaries on the device and ship the source code along on a CD\@.  However,

sometimes this turns out to be too costly.  Including a CD with every

device could prove too costly, and may practically (although not legally)

GPLv2~\S3(b) allows a distributor of binaries to instead provide a written

offer for source code alongside those binaries.  This is useful in two

specific ways.  First, it may turn out that most users do not request the

source, and thus the cost of producing the CDs is saved --- a financial

and environmental windfall.  In addition, along with a GPLv2~\S3(b) compliant

offer for source, a binary distributor might choose to \emph{also} give a

URL for source code.  Many who would otherwise need a CD with source might

turn out to have those coveted high bandwidth connections, and are able to

download the source instead --- again yielding environmental and financial

windfalls.

However, note that regardless of how many users prefer to get the

source online, GPLv2~\S3(b) does place lasting long-term obligations on the

binary distributor.  The binary distributor must be prepared to honor

that offer for source for three years and ship it out (just as they

would have had to do under GPLv2~\S3(a)) at a moment's notice when they

receive such a request.  There is real organizational cost here:

support engineers must be trained how to route source requests, and

source CD images for every release version for the last three years

must be kept on hand to burn such CDs quickly. The requests might not

even come from actual customers; the offer for source must be valid

for ``any third party''.

That phrase is another place where some get confused --- thinking again

that full public distribution of source is required.  The offer for source

must be valid for ``any third party'' because of the freedoms of

redistribution granted by GPLv2~\S\S1--2.  A company may ship a binary image

and an offer for source to only one customer.  However, under GPL, that

customer has the right to redistribute that software to the world if she

likes.  When she does, that customer has an obligation to make sure that

those who receive the software from her can exercise their freedoms under

GPL --- including the freedom to modify, rebuild, and redistribute the

source code.

GPLv2~\S3(c) is created to save her some trouble, because by itself GPLv2~\S3(b)

would unfairly favor large companies.  GPLv2~\S3(b) allows the

separation of the binary software from the key tool that people can use

to exercise their freedom. The GPL permits this separation because it is

good for redistributors, and those users who turn out not to need the

source.  However, to ensure equal rights for all software users, anyone

along the distribution chain must have the right to get the source and

exercise those freedoms that require it.

Meanwhile, GPLv2~\S3(b)'s compromise primarily benefits companies who

distribute binary software commercially.  Without GPLv2~\S3(c), that benefit

would be at the detriment of the companies' customers; the burden of

source code provision would be unfairly shifted to the companies'

customers.  A customer, who had received binaries with a GPLv2~\S3(b)-compliant

offer, would be required under GPLv2 (sans GPLv2~\S3(c)) to acquire the source,

merely to give a copy of the software to a friend who needed it.  GPLv2~\S3(c)

reshifts this burden to entity who benefits from GPLv2~\S3(b).

GPLv2~\S3(c) allows those who undertake \emph{noncommercial} distribution to

simply pass along a GPLv2~\S3(b)-compliant source code offer.  The customer who

wishes to give a copy to her friend can now do so without provisioning the

source, as long as she gives that offer to her friend.  By contrast, if

she wanted to go into business for herself selling CDs of that software,

she would have to acquire the source and either comply via GPLv2~\S3(a), or

write her own GPLv2~\S3(b)-compliant source offer.

This process is precisely the reason why a GPLv2~\S3(b) source offer must be

valid for all third parties.  At the time the offer is made, there is no

way of knowing who might end up noncommercially receiving a copy of the

software.  Companies who choose to comply via GPLv2~\S3(b) must thus be

prepared to honor all incoming source code requests.  For this and the

many other additional necessary complications under GPLv2~\S\S3(b--c), it is

only rarely a better option than complying via GPLv2~\S3(a).

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

\chapter{GPL's Implied Patent Grant}

\label{gpl-implied-patent-grant}

We digress again briefly from our section-by-section consideration of GPLv2

to consider the interaction between the terms of GPL and patent law. The

GPLv2, despite being silent with respect to patents, actually confers on its

licensees more rights to a licensor's patents than those licenses that

purport to address the issue. This is the case because patent law, under

the doctrine of implied license, gives to each distributee of a patented

article a license from the distributor to practice any patent claims owned

or held by the distributor that cover the distributed article. The

implied license also extends to any patent claims owned or held by the

distributor that cover ``reasonably contemplated uses'' of the patented

article. To quote the Federal Circuit Court of Appeals, the highest court

for patent cases other than the Supreme Court:

\begin{quotation}

Generally, when a seller sells a product without restriction, it in

effect promises the purchaser that in exchange for the price paid, it will

not interfere with the purchaser's full enjoyment of the product

purchased. The buyer has an implied license under any patents of the

seller that dominate the product or any uses of the product to which the

parties might reasonably contemplate the product will be put.

\end{quotation}

Hewlett-Packard Co. v. Repeat-O-Type Stencil Mfg. Corp., Inc., 123 F.3d

1445, 1451 (Fed. Cir. 1997).

  Corresponding Source''.  Meanwhile, use of the acronym ``CCS'' (sometimes,

  ``C\&CS'') was so widespread among GPL enforcers that its use continues

  even though GPLv3-focused experts tend to say just the defined term of

  ``Corresponding Source''.}, or, as GPLv3 officially calls it,

``Corresponding Source'' in GPLv3~\S1\P4 is possibly the most complex

definition in the license.

The CCS definition is broad so as to protect users' exercise of their rights

under the GPL\@.  The definition includes with particular examples to remove

any doubt that they are to be considered CCS\@.  GPLv3 seeks to make it

completely clear that a licensee cannot avoid complying with the requirements

of the GPL by dynamically linking a subprogram component to the original

version of a program.  The example also clarifies that the shared libraries

and dynamically linked subprograms that are included in Corresponding Source

are those that the work is ``specifically'' designed to require, which

clarifies that they do not include libraries invoked by the work that can be

readily substituted by other existing implementations.  While copyleft

advocates never doubted this was required under GPLv2's definition of CCS,

making it abundantly clear with an extra example.

GPL, as always, seeks to ensure users are truly in a position to install and

run their modified versions of the program; the CCS definition is designed to

be expansive to ensure this software freedom.  However, although the

definition of CCS is expansive, it is not sufficient to protect users'

freedoms in many circumstances.  For example, a GPL'd program, or a modified

version of such a program, might be locked-down and restricted.  The

requirements in GPLv3~\S6 (discussed in Section~\ref{GPLv3s6} of this

tutorial) handle that issue.  (Early drafts of GPLv3 included those

requirements in the definition of CCS; however, given that the lock-down

issue only comes up in distribution of object code, it is more logical to

place those requirements with the parts of GPLv3 dealing directly with object

code distribution).

The penultimate paragraph in GPLv3\S2 notes that GPLv3's CCS definition does

not require source that can be automatically generated.  Many code

generators, preprocessors and take source code as input and sometimes even

have output that is still source code.  Source code should always be whatever

the original programmer preferred to modify.

GPLv3\S1's final paragraph removes any ambiguity about what should be done on

source-only distributions.  Specifically, the right to convey source code

that does not compile, does not work, or otherwise is experimental

in-progress work is fully permitted, \textit{provided that} no object code

form is conveyed as well.  Indeed, when combined with the permissions in

GPLv3\S~5, it is clear that if one conveys \textit{only} source code, one can

never be required to provide more than that.  One always has the right to

modify a source code work by deleting any part of it, and there can be no

requirement that free software source code be a whole functioning program.

\subsection{The System Library Exception}

The previous section skipped over one part of the CCS definition, the

so-called system library exception.  The ``System Libraries'' definition (and

the ``Standard Interface'' and ``Major Component'' definitions, which it

includes) are designed as part

to permit certain distribution arrangements that are considered reasonable by

copyleft advocates.  The system library exception is designed to allow

copylefted software to link with these libraries when such linking would hurt

software freedom more than it would hurt proprietary software.

The system library exception has two parts.  Part (a) rewords the GPLv2

exception for clarity replaces GPLv2's words ``unless that component itself

accompanies the executable'' with ``which is not part of the Major

Component''.  The goal here is to not require disclosure of source code of

certain libraries, such as necessary Microsoft Windows DLLs (which aren't

part of Windows' kernel but accompany it) that are required for functioning

of copylefted programs compiled for Windows.

However, in isolation, (a) would be too permissive, as it would sometimes

allowing distributors to evade important GPL requirements.  Part (b) reigns

in (a).  Specifically, (b) specifies only a few functionalities that a the

system library may provide and still qualify for the exception.  The goal is

to ensure system libraries are truly adjunct to a major essential operating

system component, compiler, or interpreter.  The more low-level the

functionality provided by the library, the more likely it is to be qualified

for this exception.

Admittedly, the system library exception is a frequently discussed topic of

obsessed GPL theorists.  The amount that has been written on the system

library exception (both the GPLv2 and GPLv3 versions of it), if included

herein,  could easily increase this section of the tutorial to a length

greater than all the others.

Like any exception to the copyleft requirements of GPL, would-be GPL

violators frequently look to the system library exception as a potential

software freedom circumvention technique.  When considering whether or not a

library qualifies for the system library exception, here is a pragmatic

thesis to consider, based on the combined decades of experience in GPL

interpretation of this tutorial's authors: the harder and more strained the

reader must study and read the system library exception, the more likely it

is that the library in question does not qualify for it.

\section{GPLv3~\S2: Basic Permissions}

GPLv3~\S2 can roughly be considered as an equivalent to GPLv2~\S0 (discussed

improvements found in GPLv3 are found here as well.  For example, the first

sentence of GPLv3~\S2 furthers the goal internationalization.  Under the

copyright laws of some countries, it may be necessary for a copyright license

to include an explicit provision setting forth the duration of the rights

being granted. In other countries, including the USA, such a provision is

unnecessary but permissible.

GPLv3~\S2\P1 also acknowledges that licensees under the GPL enjoy rights of

copyright fair use, or the equivalent under applicable law.  These rights are

compatible with, and not in conflict with, the freedoms that the GPL seeks to

protect, and the GPL cannot and should not restrict them.

However, note that (sadly to some copyleft advocates) the unlimited freedom

to run is confined to the \textit{unmodified} Program.  This confinement is

unfortunately necessary since Programs that do not qualify as a User Product

in GPLv3~\S6 (see \S~\ref{user-product} in this tutorial) might have certain

unfortunate restrictions on the freedom to run\footnote{See

  \S~ref{freedom-to-run} of this tutorial for the details on ``the freedom to

  run''.}

GPLv3~\S2\P2 distinguishes between activities of a licensee that are

permitted without limitation and activities that trigger additional

requirements.  Specifically, GPLv3~\S2\P2 guarantees the basic freedoms of

privately modifying and running the program.

Also, GPLv3~\S2\P2 gives an explicit permission for a client to provide a

copy of its modified software to a contractor exclusively for that contractor

to modify it further, or run it, on behalf of the client.  However, the

client can \textit{only} exercise this control over its own copyrighted

changes to the GPL-covered program.  The parts of the program it obtained

from other contributors must be provided to the contractor with the usual GPL

freedoms.  Thus, GPLv3 permits users to convey covered works to contractors

operating exclusively on the users' behalf, under the users' direction and

control, and to require the contractors to keep the users' copyrighted

changes confidential, but \textit{only if} the contractor is limited to acting

on the users' behalf (just as the users' employees would have to act).

The strict conditions in this ``contractors provision'' are needed so that it

cannot be twisted to fit other activities, such as making a program available

to downstream users or customers.  By making the limits on this provision

very narrow, GPLv3 ensures that, in all other cases, contractors gets the

full freedoms of the GPL that they deserve.

GPLv3~\S2's final paragraph includes an explicit prohibition of sublicensing.

This provision ensures that GPL enforcement is always by the copyright

holder.  Usually, sublicensing is regarded as a practical convenience or

necessity for the licensee, to avoid having to negotiate a license with each

licensor in a chain of distribution.  The GPL solves this problem in another

way --- through its automatic licensing provision found in GPLv3\~S10 (which

is discussed in more detail in \S\~ref{GPLv3s10} of this tutorial).

\section{GPLv3's views on DRM and Device Lock-Down}

\label{GPLv3-drm}

The issues of DRM, device lock-down and encryption key disclosure were the

most hotly debated during the GPLv3 process.  FSF's views on this were sadly

frequently misunderstood and, comparing the provisions related to these

issues in the earliest drafts of GPLv3 to  the final version of GPLv3 shows

the FSF's willingness to compromise on tactical issues to reach the larger

goal of software freedom.

Specifically, GPLv3 introduced provisions that respond to the growing

practice of distributing GPL-covered programs in devices that employ

technical means to restrict users from installing and running modified

versions.  This practice thwarts the expectations of developers and users

alike, because the right to modify is one of the core freedoms the GPL is

designed to secure.

Technological measures to defeat users' rights.  These measures are often

described by such Orwellian phrases, such as ``digital rights management,''

which actually means limitation or outright destruction of users' legal

rights, or ``trusted computing,'' which actually means selling people

computers they cannot trust.  However, these measures are alike in one basic

respect.  They all employ technical means to turn the system of copyright law

(where the powers of the copyright holder are limited exceptions to general

freedom) into a virtual prison, where everything not specifically permitted

is utterly forbidden.  This system of ``para-copyright'' was created well

after GPLv2 was written --- initially through legislation in the USA and the

EU, and later in other jurisdictions as well.  This legislation creates

serious civil or even criminal penalties to escape from these restrictions

(commonly and aptly called ``jail-breaking a device''), even where the

purpose in doing so is to restore the users' legal rights that the technology

wrongfully prevents them from exercising.

GPLv2 did not address the use of technical measures to take back the rights

that the GPL granted, because such measures did not exist in 1991, and would

have been irrelevant to the forms in which software was then delivered to

users.  GPLv3 addresses these issues, particularly because copylefted

software is ever more widely embedded in devices that impose technical

limitations on the user's freedom to change it.

However, FSF always made a clear distinction to avoid conflating these

``lock-down'' measures with legitimate applications that give users control,

as by enabling them to choose higher levels of system or data security within

their networks, or by allowing them to protect the security of their

communications using keys they can generate or copy to other devices for