fix security vulnerability Signed-off-by: Lichang zhao <zhaolichang@huawei.com> Signed-off-by: Jinhao Gao <gaojinhao@huawei.com>