Where's my source code? —

Hackers can’t dig into latest Xiaomi phone due to GPL violations

Xiaomi is dragging its feet on the GPL again, this time with the Mi A1.

Hackers can’t dig into latest Xiaomi phone due to GPL violations

Yet another Android OEM is dragging its feet with its GPL compliance. This time, it's Xiaomi with the Mi A1 Android One device, which still hasn't seen a kernel source code release.

Android vendors are required to release their kernel sources thanks to the Linux kernel's GPLv2 licensing. The Mi A1 has been out for about three months now, and there's still no source code release on Xiaomi's official github account.

Unfortunately, GPL non-compliance is par for the course in the world of Android. Budget SoC company MediaTek once tried charging users for access to GPL'd code. Motorola under Lenovo has been regularly accused of violating the GPL and releasing incomplete sources or sources that differ from the kernel shipping on devices. Unsurprisingly, the majority of these alleged GPL violators are from China, which often plays fast and loose with IP law.

Android developers use the source code to create custom kernels that tweak the way a device works, allowing for overclocking, better battery life, or control over the CPU governor. One of the largest custom kernel developers, Francisco Franco, has started a public Twitter campaign to encourage Xiaomi to comply with the GPL.

A delayed release of its kernel source is typical for Xiaomi. For its past two flagships, the Mi 6 and Mi 5, the company took six months to release its GPL'd source code. The Mi A1 has only been out for three months, so if Xiaomi follows the typical timeline, users can expect another three-month wait before developers have source code to pick through.

It's understandable that customers are expecting better from the Mi A1 though. As Xiaomi's first Android One phone, the Mi A1 is being heavily promoted by Google as a phone that does software right, with stock Android and fast updates. It's also Xiaomi's most widely distributed phone. The company primarily releases smartphones in developing countries like China and India, but as an Android One device, the Mi A1 is launching in over 40 markets. In the US, you can buy one on Amazon right now.

So far, we haven't seen Google's involvement with the A1 lead to faster GPL compliance.

Channel Ars Technica