Update brotli to v1.0.9
Open
- Dominant language
- C++
- Stars
- 1.8k
- Forks
- 228
- PR merge metrics
- No merged PRs in 30d
Description
> Please consider updating brotli to version 1.0.9 (latest).
>
> Version 1.0.9 contains a fix to "integer overflow" problem. This happens when "one-shot" decoding API is used (or input chunk for streaming API is not limited), input size (chunk size) is larger than 2GiB, and input contains uncompressed blocks. After the overflow happens, memcpy is invoked with a gigantic num value, that will likely cause the crash.
https://github.com/google/brotli/releases/tag/v1.0.9
Contributor guide
Assessment
This issue has not been assessed yet.