|Evgenii Kliuchnikov <firstname.lastname@example.org>
|Thu Jul 20 00:55:28 2023 -0700
|Thu Jul 20 01:19:13 2023 -0700
Workaround for GitHub / CodeQL bug Sometimes GitHub Actions uses bare branch name whereas CodeQL always expects ref. See https://github.com/github/codeql-action/issues/796 PiperOrigin-RevId: 549548061
Please consider updating brotli to version 1.0.9 (latest).
Version 1.0.9 contains a fix to “integer overflow” problem. This happens when “one-shot” decoding API is used (or input chunk for streaming API is not limited), input size (chunk size) is larger than 2GiB, and input contains uncompressed blocks. After the overflow happens,
memcpy is invoked with a gigantic
num value, that will likely cause the crash.
Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression.
The specification of the Brotli Compressed Data Format is defined in RFC 7932.
Brotli is open-sourced under the MIT License, see the LICENSE file.
Please note: brotli is a “stream” format; it does not contain meta-information, like checksums or uncompresssed data length. It is possible to modify “raw” ranges of the compressed stream and the decoder will not notice that.
Brotli mailing list: https://groups.google.com/forum/#!forum/brotli
You can download and install brotli using the vcpkg dependency manager:
git clone https://github.com/Microsoft/vcpkg.git cd vcpkg ./bootstrap-vcpkg.sh ./vcpkg integrate install ./vcpkg install brotli
The brotli port in vcpkg is kept up to date by Microsoft team members and community contributors. If the version is out of date, please create an issue or pull request on the vcpkg repository.
The basic commands to build and install brotli are:
$ mkdir out && cd out $ cmake -DCMAKE_BUILD_TYPE=Release -DCMAKE_INSTALL_PREFIX=./installed .. $ cmake --build . --config Release --target install
You can use other CMake configuration.
To install the latest release of the Python module, run the following:
$ pip install brotli
To install the tip-of-the-tree version, run:
$ pip install --upgrade git+https://github.com/google/brotli
See the Python readme for more details on installing from source, development, and testing.
Disclaimer: Brotli authors take no responsibility for the third party projects mentioned in this section.
Independent decoder implementation by Mark Adler, based entirely on format specification.
npm install brotli
Dart native bindings
Dart compression framework with fast FFI-based Brotli implementation with ready-to-use prebuilt binaries for Win/Linux/Mac