[cpesuggest] Add CPE prefix for third_party/brotli/README.chromium.

To verify the correctness of the suggested CPE Prefix, please follow the
steps below:
1. Visit the National Vulnerability Database (NVD) page for the suggested
   CPE Prefix here: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.2&keyword=cpe:/a:google:brotli&status=FINAL%2CDEPRECATED
2. Check whether the third-party dependency for which the CPE Prefix is
   suggested matches the project listed in the NVD page.
3. If the open source project matches and the CPE prefix is not deprecated,
   please Code-Review+1 and submit if you have enough votes.
4. If the open source project does not match or if the CPE prefix is
   deprecated, please add the incorrect suggestion to go/ignored_cpes_textproto
   and add the reason why the suggestion is incorrect.

Adding CPE prefixes to a README.chromium file is recommended practice [1] to
enable automated vulnerability monitoring. For more information on how CPE
prefixes are used see the Chromium Third Party docs [2].

[1] https://chromium.googlesource.com/chromium/src/+/HEAD/third_party/README.chromium.template

[2] https://chromium.googlesource.com/chromium/src/+/HEAD/docs/adding_to_third_party.md#add-a-readme_chromium

Bug: b/290294330
Change-Id: I45a7b3e4a3beed723dd18ae23fd09f5c024054b1
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6779772
Auto-Submit: CPE Updater <chops-security-cronjobs-cpesuggest@prod.google.com>
Reviewed-by: Kenichi Ishibashi <bashi@chromium.org>
Reviewed-by: Joey Scarr <jsca@google.com>
Commit-Queue: Kenichi Ishibashi <bashi@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1491877}
NOKEYCHECK=True
GitOrigin-RevId: 0a3113975fca9105b496fb97ed95ef87fa77d687
1 file changed
tree: 0c85090ba747c2548f3ac785db123bd795abdeb7
  1. common/
  2. dec/
  3. enc/
  4. fuzz/
  5. include/
  6. tools/
  7. BUILD.gn
  8. DEPS
  9. DIR_METADATA
  10. LICENSE
  11. OWNERS
  12. README.chromium
  13. README.md
README.md

Introduction

Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression.

The specification of the Brotli Compressed Data Format is defined in RFC 7932.

Brotli is open-sourced under the MIT License, see the LICENSE file.

Brotli mailing list: https://groups.google.com/forum/#!forum/brotli

TravisCI Build Status AppVeyor Build Status

Build instructions

Autotools-style CMake

configure-cmake is an autotools-style configure script for CMake-based projects (not supported on Windows).

The basic commands to build, test and install brotli are:

$ mkdir out && cd out
$ ../configure-cmake
$ make
$ make test
$ make install

By default, debug binaries are built. To generate “release” Makefile specify --disable-debug option to configure-cmake.

Bazel

See Bazel

CMake

The basic commands to build and install brotli are:

$ mkdir out && cd out
$ cmake -DCMAKE_BUILD_TYPE=Release -DCMAKE_INSTALL_PREFIX=./installed ..
$ cmake --build . --config Release --target install

You can use other CMake configuration.

Premake5

See Premake5

Python

To install the latest release of the Python module, run the following:

$ pip install brotli

To install the tip-of-the-tree version, run:

$ pip install --upgrade git+https://github.com/google/brotli

See the Python readme for more details on installing from source, development, and testing.

Benchmarks

Related projects

Disclaimer: Brotli authors take no responsibility for the third party projects mentioned in this section.

Independent decoder implementation by Mark Adler, based entirely on format specification.

JavaScript port of brotli decoder. Could be used directly via npm install brotli

Hand ported decoder / encoder in haxe by Dominik Homberger. Output source code: JavaScript, PHP, Python, Java and C#

7Zip plugin

Dart native bindings