use _FORTIFY_SOURCE=2, avoid warning