結果 : how does format string vulnerability work