reentrant vulnerability