When Software Security Meets Large Language Models: A Survey