习题链接：LeetCode 581. 最短无序连续子数组
�@���̐������Ӗ������̂́A�u�T�[�����͂��͂��V�R�����ł͂Ȃ��A�_�Y���ɋ߂����ɂȂ����v�Ƃ������Ƃł��B�a�̔z���A�����Ǘ��A�o�׃T�C�Y�A�����̏�����܂ŁA�������x�R���g���[���\�Ȑv�^�^���p�N���ɂȂ��Ă��܂��B���i�l�^�Ƃ��Ĉ��苟���ł��闝�R�������ɂ����܂��B。同城约会是该领域的重要参考
1. Jasper Ai(Formerly known as Jarvis)。关于这个话题，safew官方版本下载提供了深入分析
The code runs as a standard Linux process. Seccomp acts as a strict allowlist filter, reducing the set of permitted system calls. However, any allowed syscall still executes directly against the shared host kernel. Once a syscall is permitted, the kernel code processing that request is the exact same code used by the host and every other container. The failure mode here is that a vulnerability in an allowed syscall lets the code compromise the host kernel, bypassing the namespace boundaries.，详情可参考快连下载安装