speedyfriend433 / sandbox_extension-TOCTOU-bug Read restricted system files with sandbox_extension TOCTOU bug security macos reverse-engineering