attack path fix