fix: 解决 long 类型参数溢出 & c_cpp 白名单补充 readlinkat 权限

[helsonxiao]

• 解决 long 类型参数使用 arg_intn 解析导致的溢出问题
• 修复测试用例不通过问题，补充 readlinkat 权限
• 修复测试用例中的废弃代码，使用 debian:trixie-slim 和 https://github.com/QingdaoU/JudgeServer/blob/master/Dockerfile 保持一致

docker run -it --rm -v $PWD:/src judger-test /bin/bash -c "chmod +x tests/runtest.sh && ./tests/runtest.sh"
+ dir=/src
+ python3 -V
Python 3.13.5
+ gcc -v
Using built-in specs.
COLLECT_GCC=gcc
COLLECT_LTO_WRAPPER=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper
OFFLOAD_TARGET_NAMES=nvptx-none:amdgcn-amdhsa
OFFLOAD_TARGET_DEFAULT=1
Target: x86_64-linux-gnu
Configured with: ../src/configure -v --with-pkgversion='Debian 14.2.0-19' --with-bugurl=file:///usr/share/doc/gcc-14/README.Bugs --enable-languages=c,ada,c++,go,d,fortran,objc,obj-c++,m2,rust --prefix=/usr --with-gcc-major-version-only --program-suffix=-14 --program-prefix=x86_64-linux-gnu- --enable-shared --enable-linker-build-id --libexecdir=/usr/libexec --without-included-gettext --enable-threads=posix --libdir=/usr/lib --enable-nls --enable-bootstrap --enable-clocale=gnu --enable-libstdcxx-debug --enable-libstdcxx-time=yes --with-default-libstdcxx-abi=new --enable-libstdcxx-backtrace --enable-gnu-unique-object --disable-vtable-verify --enable-plugin --enable-default-pie --with-system-zlib --enable-libphobos-checking=release --with-target-system-zlib=auto --enable-objc-gc=auto --enable-multiarch --disable-werror --enable-cet --with-arch-32=i686 --with-abi=m64 --with-multilib-list=m32,m64,mx32 --enable-multilib --with-tune=generic --enable-offload-targets=nvptx-none=/build/reproducible-path/gcc-14-14.2.0/debian/tmp-nvptx/usr,amdgcn-amdhsa=/build/reproducible-path/gcc-14-14.2.0/debian/tmp-gcn/usr --enable-offload-defaulted --without-cuda-driver --enable-checking=release --build=x86_64-linux-gnu --host=x86_64-linux-gnu --target=x86_64-linux-gnu --with-build-config=bootstrap-lto-lean --enable-link-serialization=3
Thread model: posix
Supported LTO compression algorithms: zlib zstd
gcc version 14.2.0 (Debian 14.2.0-19) 
+ g++ -v
Using built-in specs.
COLLECT_GCC=g++
COLLECT_LTO_WRAPPER=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper
OFFLOAD_TARGET_NAMES=nvptx-none:amdgcn-amdhsa
OFFLOAD_TARGET_DEFAULT=1
Target: x86_64-linux-gnu
Configured with: ../src/configure -v --with-pkgversion='Debian 14.2.0-19' --with-bugurl=file:///usr/share/doc/gcc-14/README.Bugs --enable-languages=c,ada,c++,go,d,fortran,objc,obj-c++,m2,rust --prefix=/usr --with-gcc-major-version-only --program-suffix=-14 --program-prefix=x86_64-linux-gnu- --enable-shared --enable-linker-build-id --libexecdir=/usr/libexec --without-included-gettext --enable-threads=posix --libdir=/usr/lib --enable-nls --enable-bootstrap --enable-clocale=gnu --enable-libstdcxx-debug --enable-libstdcxx-time=yes --with-default-libstdcxx-abi=new --enable-libstdcxx-backtrace --enable-gnu-unique-object --disable-vtable-verify --enable-plugin --enable-default-pie --with-system-zlib --enable-libphobos-checking=release --with-target-system-zlib=auto --enable-objc-gc=auto --enable-multiarch --disable-werror --enable-cet --with-arch-32=i686 --with-abi=m64 --with-multilib-list=m32,m64,mx32 --enable-multilib --with-tune=generic --enable-offload-targets=nvptx-none=/build/reproducible-path/gcc-14-14.2.0/debian/tmp-nvptx/usr,amdgcn-amdhsa=/build/reproducible-path/gcc-14-14.2.0/debian/tmp-gcn/usr --enable-offload-defaulted --without-cuda-driver --enable-checking=release --build=x86_64-linux-gnu --host=x86_64-linux-gnu --target=x86_64-linux-gnu --with-build-config=bootstrap-lto-lean --enable-link-serialization=3
Thread model: posix
Supported LTO compression algorithms: zlib zstd
gcc version 14.2.0 (Debian 14.2.0-19) 
+ cd /src
+ rm -rf build
+ mkdir build
+ cd build
+ cmake ..
CMake Deprecation Warning at CMakeLists.txt:1 (cmake_minimum_required):
  Compatibility with CMake < 3.10 will be removed from a future version of
  CMake.

  Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
  to tell CMake that the project requires at least <min> but has been updated
  to work with policies introduced by <max> or earlier.


-- The C compiler identification is GNU 14.2.0
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Check for working C compiler: /usr/bin/cc - skipped
-- Detecting C compile features
-- Detecting C compile features - done
-- Configuring done (0.4s)
-- Generating done (0.0s)
-- Build files have been written to: /src/build
+ make
[  8%] Building C object CMakeFiles/libjudger.so.dir/src/argtable3.o
[ 16%] Building C object CMakeFiles/libjudger.so.dir/src/child.o
[ 25%] Building C object CMakeFiles/libjudger.so.dir/src/killer.o
[ 33%] Building C object CMakeFiles/libjudger.so.dir/src/logger.o
[ 41%] Building C object CMakeFiles/libjudger.so.dir/src/main.o
[ 50%] Building C object CMakeFiles/libjudger.so.dir/src/rules/c_cpp.o
[ 58%] Building C object CMakeFiles/libjudger.so.dir/src/rules/c_cpp_file_io.o
[ 66%] Building C object CMakeFiles/libjudger.so.dir/src/rules/general.o
[ 75%] Building C object CMakeFiles/libjudger.so.dir/src/rules/golang.o
[ 83%] Building C object CMakeFiles/libjudger.so.dir/src/rules/node.o
[ 91%] Building C object CMakeFiles/libjudger.so.dir/src/runner.o
[100%] Linking C executable /src/output/libjudger.so
[100%] Built target libjudger.so
+ make install
[100%] Built target libjudger.so
Install the project...
-- Install configuration: ""
-- Installing: /usr/lib/judger/libjudger.so
+ cd ../bindings/Python
+ rm -rf build
+ python3 -m pip install --break-system-packages .
Processing /src/bindings/Python
  Installing build dependencies ... done
  Getting requirements to build wheel ... done
  Preparing metadata (pyproject.toml) ... done
Building wheels for collected packages: judger
  Building wheel for judger (pyproject.toml) ... done
  Created wheel for judger: filename=judger-2.2.0-py3-none-any.whl size=1994 sha256=02d3201a8daf8acf1a4fa93fce769c6cfed89fffebe7f82ecd77d825013d53e8
  Stored in directory: /tmp/pip-ephem-wheel-cache-vehjxpfh/wheels/25/dd/ec/6641c346b1d24873719c213e1dad63e8671caed9e207c6a577
Successfully built judger
Installing collected packages: judger
Successfully installed judger-2.2.0
WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager, possibly rendering your system unusable. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv. Use the --root-user-action option if you know what you are doing and want to suppress this warning.
+ cd ../../tests/Python_and_core
+ python3 test.py
Judger version 2.1.1
3.13.5 (main, Jun 25 2025, 18:55:22) [GCC 14.2.0]
Running test_args
.Running test_args_item_must_be_string
.Running test_args_must_be_list
.Running test_child_proc_cpu_time_limit
.Running test_child_proc_real_time_limit
.Running test_cpp_meta
.Running test_cpu_time
.Running test_env
.Running test_env_item_must_be_string
.Running test_env_must_be_list
.Running test_gcc_random
.Running test_get_time
.Running test_memory1
.Running test_memory2
.Running test_memory3
.Running test_memory4
.Running test_memory_limit_check_only
.Running test_normal
.Running test_output_size
.Running test_re1
.Running test_re2
.Running test_real_time
.Running test_seccomp_rule_can_be_none
.Running test_stack_size
.Running test_stdout_and_stderr
.Running test_uid_and_gid
.Running test_writev
.Running test_exceveat
.Running test_execve
.Running test_fork
.Running test_read_write_file_using_open
.Running test_read_write_file_using_openat
.Running test_sysinfo
.Running test_write_file_using_open
.Running test_write_file_using_openat
.
----------------------------------------------------------------------
Ran 35 tests in 19.871s

OK

[helsonxiao]

@mikucat0309 @virusdefender