Comment 5 for bug 1714968

Ugg there is such a malange of bits in there. Of the bits we are using there is only one bit to my eye which is suspect. In uvp-monitor/securec is source for a library which does not appear to claim to be GPL-2 indeed it appears to claim to be proprietry. It does appear that this code was submitted to the upstream github repo by Huawei but that probabally ought to be queried with the vendor.