Empowering users of GPL software
A new style of GPL-enforcement lawsuit was filed on October 19 by Software Freedom Conservancy (SFC) against television maker Vizio. Unlike previous GPL-enforcement suits, which have been pursued on behalf of the developers and copyright holders of GPL-licensed code, this suit has been filed on behalf of owners of the TVs in question. The idea that owners of devices that contain code under the GPL have the right to access that code seems clearly embodied in the license, but it remains to be seen if the courts will decide that those owners have the legal standing to sue for relief.
Novel
There are some other ways this lawsuit stands out from previous efforts. For one thing, it comes with an extensive press kit to help media outlets (and others) understand the suit and its ramifications. The press kit fills in some of the details from the complaint, but also provides a "Q&A" section, biographies of SFC spokespeople, quotes from various industry experts, a glossary, and more. It is an excellent summary of the background for those who are not well-versed in our community and its licenses, but there is quite a bit of interest in that document even for LWN readers and others who are generally knowledgeable about such things.
The press kit makes clear that an additional goal of the lawsuit is to educate users about their rights under the GPL and why those rights should matter to them. The lawsuit could be seen as something of an attention-grabbing effort to try to help ensure that the benefits of licenses like the GPL actually end up reaching the users who are supposed to be the beneficiaries of the source-code disclosure required. Doing so is in keeping with the public-benefit role of charities like SFC, but is typically not part of the strategy embodied in lawsuits, which are clearly targeted at the legal system—and the defendant, of course.
Unlike many high-profile lawsuits, SFC's suit is not asking for monetary damages from Vizio; instead it is asking the court to order Vizio to comply with the terms of the GPL and LGPL that cover code in its TVs. Beyond that, it is asking the court to declare that the terms and conditions of the GPL licenses require source-code disclosure, effectively determining that the GPL operates the way that the free-software community believes that it does—and that Vizio is in breach of the license. The only monetary requests are for reimbursements of the costs and attorney fees needed to pursue the lawsuit.
The 27-page complaint is, as might be guessed, a detailed description of the problems that SFC sees in the actions of Vizio. The next step will presumably be a response to the complaint, which will be public as well. This stands in contrast to the confidential nature of many of the filings in the SFC's most recent GPL-enforcement suit, Christoph Hellwig v. VMware, which was filed in Germany and eventually dismissed on procedural grounds. That lack of transparency was one reason to file in the US, as SFC executive director Karen Sandler said in the press kit:
Given that so many GPL violators are based here in the U.S. (including Vizio) and because of the transparency of the U.S. legal system, it makes sense as a venue for this litigation. In particular, we listened to individuals in the FOSS legal community who complained that the Hellwig vs. VMWare case in Germany—which we partially funded—was not transparent. We worked very hard to compel more transparency in the German legal system, but we were simply unable to do so. We heard those complaints and listened to the FOSS legal community and its suggestion that transparent litigation about the GPL was the right way to go.
Details
As with many (most?) "smart" TV makers today, Vizio uses Linux and a variety of other GPL/LGPL-covered code in its SmartCast platform that runs on its devices. According to the complaint, Vizio TVs that SFC purchased did not come with offers to provide the source code for those components, nor with the source code itself (on a CD, say), either of which is required in order to comply with the licenses.
SFC became aware of the problem and purchased one of the TVs in question in March 2018. It found that the Linux kernel was present on the device, but there was no offer or source code. SFC contacted Vizio in August 2018 about that problem, which started a lengthy process where Vizio tried to provide the source code for the kernel.
Throughout 2019, Vizio provided six separate versions of the source code to
SFC, but none of them would actually compile, according to the complaint.
Each time, SFC provided a detailed report to Vizio "showing what was provided and what it
believes, after its analysis, to be missing
". Toward the end
of 2019, the organization participated in a conference call with Vizio and
its chip supplier to discuss the problems with the source code provided.
In January 2020, Vizio expressed hope that the supplier would come up
with the missing pieces soon, but that was the last communication SFC had with
the company—even after six follow-ups in the following five months.
In mid-2021, SFC purchased three different models of Vizio TVs. In looking at the firmware on the devices, SFC found 13 more GPL-covered components (including BusyBox, Bash, and Awk) and 11 LGPL-covered components (including the GNU C library, FFmpeg, and systemd). Those three models are specifically at issue in the suit, though it is clear that the hope is that any ruling will cover all models that Vizio makes or will make that contain GPL code.
The question of legal standing
would seem pivotal in this case. Suits can only proceed if the plaintiff
can show "sufficient connection to and harm from the law or action
challenged
"; a determination of a lack of standing for SFC (as a
placeholder for all users) could
derail the suit without the court ever looking deeper into the issue. The procedural
issue that caused the dismissal in Germany was, effectively, that Hellwig
did not show enough copyright in the kernel to bring his suit. Here,
instead of a copyright holder suing over the misuse of their copyrighted
code, we have users who are not parties in the license directly asking for
relief from the courts.
The complaint lays out the case for granting standing starting at clause 107 on page 20. A few separate clauses get to the heart of the argument SFC is making:
110. Therefore, a motivating purpose—indeed, the sine qua non—of the GPLv2 and LGPLv2.1 is to provide the Source Code to downstream recipients of computer programs covered by those license agreements.[...] 112. It is consistent with the objectives and express language of the GPLv2 and LGPLv2.1 to permit recipients of executable software covered by those license agreements, such as purchasers of Vizio smart TVs, to seek court assistance to enforce their right to the corresponding Source Code.
[...] 116. Plaintiff is not a contracting party to the GPLv2 or the LGPLv2.1 as that agreement relates to the Vizio smart TVs, in that it is not asserting that it is the licensor of the software used in Vizio smart TV s or any works based on the software or derivative thereof.
117. Plaintiff is a member of a class of persons for whose benefit the GPLv2 and LGPL v2 .1 were created and intended.
[...] 121. As a third-party beneficiary under the GPLv2 and LGPLv2.1, Plaintiff has a right to the Source Code corresponding to the executables of the SmartCast Programs at Issue and Linking Library Programs that reside on the Vizio smart TVs purchased by it.
As can be seen above, the complaint is somewhat repetitive and verbose, which is normal for a filing of this sort. It does make for interesting reading for those who want a deeper look into what SFC alleges and what it thinks a judge should do if they agree.
Often, in the case of a lawsuit against a device maker like Vizio, it is filed as a class action, where multiple consumers harmed by the actions of the manufacturer join together in the suit. Typically, those kinds of suits target a monetary penalty that gets shared among those who join into the suit—after the lawyers take their, usually hefty, fees off the top. But, as the Q&A notes, the penalties requested in this case obviate the need for multiple plaintiffs:
Furthermore, pursuant to "The Principles of Community Oriented GPL Enforcement," the lawsuit does not prioritize financial remedy over compliance. This lawsuit seeks the most important remedy for the public good: release of the Complete, Corresponding Source (CCS) for all GPL'd components on Vizio TVs. Once that is achieved, the benefit is immediately available to not only all who purchased a Vizio TV, but also to the entire FOSS [Free and Open-Source Software] community.
Looking ahead
This is an interesting case for a number of different reasons, though it could well play out over quite a few years before we really know its outcome. One need only look at how long Google v. Oracle—or the seemingly never-ending SCO v. IBM case—took to resolve to realize that this case could stretch out for a decade or more. Assuming the facts are being reported accurately in the complaint—and they seem rather cut and dried—it is difficult to see what argument Vizio could make to short-circuit its GPL obligations, except, of course, for SFC's standing.
Vizio could also presumably cut the lawsuit off at the knees by simply complying with the licenses. Perhaps that is hard to do, however, as it would seem that the chip supplier is unable to produce the complete corresponding source—at least so far. From a business perspective, though, one might guess device makers would be leery of seeing an adverse judgment in this case. If any buyer of a device can successfully win a lawsuit of this nature, it greatly expands the number of potential plaintiffs out there. On the other hand, it also means that the arguments made about copyright assignment being necessary for GPL enforcement will have been weakened—or rendered moot.
But, of course, if users are found not to have standing, there is no shortage of potential targets for a GPL-enforcement suit by copyright holders of Linux and other FOSS components. The right answer, as always, is for companies to simply voluntarily comply with the licenses on the plethora of high-quality code that our communities make available to them. SFC is slowly ratcheting up the pressure to hopefully someday make that happen as a matter of course.
