Skip to content

Case-Sensitive IRI as spdxId #283

@AlexanderDenkBMW

Description

@AlexanderDenkBMW

Hi,

using the tools-java in their 2.0.5 version I got an issue with duplicate spdxIds:

Analysis exception processing SPDX file: Object URI already exists.

Looking at the spdxIds I've notices that they are only identical if they are threaded case-insensitive. By specification the path of an URL should be case-sensitive.
This makes also sense as in fact the file exists twice in the Linux kernel includes the file twice with different content:

Simplified Examples:

https://spdx.example.com/doc-/packages/usr_lib_modules_kernel_net_netfilter_xt_hl_ko_a
https://spdx.example.com/doc-/packages/usr_lib_modules_kernel_net_netfilter_xt_HL_ko_a

In my eyes this is not an error but intended usage.

Metadata

Metadata

Assignees

No one assigned

    Labels

    questionFurther information is requested

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions