PWN RE SMC SROP TEA UAF VM WP awdp code csu fini_array gdb heap mprotect one_gadget orw patch rax替代 ret2libc-printf stack tcache unlink 分字节 栈迁移 格式化字符串 花指令 静态编译