Skip to content

False positive detecton of wordnet license from wordnet_2.RULE #3356

Description

@DennisClark

A recent scan of the file index.xsb in poi-ooxml-lite-5.2.2.jar returned a detected license of wordnet even though the score was only 19.09 and the match coverage was only 21.21. A quick comparison of the very simple, short paragraph in wordnet_2.RULE with the actual text in the scanned file shows the obvious disparity. Here is the text from index.xsb

  Permission to copy, display and distribute the contents of this document (the
  "Specification"), in any medium for any purpose without fee or royalty is
  hereby granted, provided that you include the following notice on ALL copies of
  the Specification, or portions thereof, that you make:
  Copyright (c) Microsoft Corporation.  All rights reserved.  Permission to copy,
  display and distribute this document is available at:
  http://msdn.microsoft.com/library/en-us/odcXMLRef/html/odcXMLRefLegalNotice.asp?frame=true.
  No right to create modifications or derivatives of this Specification is
  granted herein. There is a separate patent license available to parties
  interested in implementing software programs that can read and write files that
  conform to the Specification.  This patent license is available at this
  location:  http://www.microsoft.com/mscorp/ip/format/xmlpatentlicense.asp.
  THE SPECIFICATION IS PROVIDED "AS IS" AND MICROSOFT MAKES NO REPRESENTATIONS OR
  WARRANTIES, EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, WARRANTIES OF
  MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR TITLE;
  THAT THE CONTENTS OF THE SPECIFICATION ARE SUITABLE FOR ANY PURPOSE; NOR THAT
  THE IMPLEMENTATION OF SUCH CONTENTS WILL NOT INFRINGE ANY THIRD PARTY PATENTS,
  COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS. MICROSOFT WILL NOT BE LIABLE FOR ANY
  DIRECT, INDIRECT, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF
  OR RELATING TO ANY USE OR DISTRIBUTION OF THE SPECIFICATION.
  The name and trademarks of Microsoft may NOT be used in any manner, including
  advertising or publicity pertaining to the Specification or its contents
  without specific, written prior permission. Title to copyright in the
  Specification will at all times remain with Microsoft. No other rights are
  granted by implication, estoppel or otherwise.

The actual Wordnet License https://scancode-licensedb.aboutcode.org/wordnet.html is clearly from Princeton University, not Microsoft, and is quite different from the text that was scanned in the index.xsb file. It is also possible that we are looking at a new and distinct Microsoft-authored license here.

Refer to https://mvnrepository.com/artifact/org.apache.poi/poi-ooxml-lite/5.2.2

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Labels

buglicense-reviewA license detection issue that needs review

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions