https://blog.csdn.net/weixin_44037296/article/details/119182793
https://www.openwall.com/lists/oss-security/2021/01/05/2