if (n <= 1) return;
For running trusted code that you wrote and reviewed, Docker with a seccomp profile is probably fine. The isolation is against accidental interference, not adversarial escape.
，更多细节参见搜狗输入法2026
南方周末：那是否可以理解为，这种关于速度的选择，其实是有意识的决定，而不是完全即兴发生的？
int n = sizeof(arr)/sizeof(arr[0]);