use _safe_pickle_load for resume_file

[chensuyue]

User description

Type of Change

CVE fix

Description

use _safe_pickle_load for resume_file

---

PR Type

Enhancement

---

Description

• Replace pickle.load with _safe_pickle_load for safer loading

---

Diagram Walkthrough

flowchart LR
  A["Use _safe_pickle_load"] -- "Replace pickle.load" --> B["Enhance security"]

Loading

File Walkthrough

	Relevant files
Enhancement	quantization.py Replace pickle.load with _safe_pickle_load                              neural_compressor/quantization.py Import _safe_pickle_load from utility module Replace pickle.load with _safe_pickle_load for resume_file +2/-2

---

[PRAgent4INC]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪

🧪 No relevant tests

🔒 No security concerns identified

⚡ Recommended focus areas for review Possible Issue Ensure that _safe_pickle_load handles all edge cases and exceptions that pickle.load might handle differently, especially since this change affects file loading. _resume = _safe_pickle_load(f).__dict__

[PRAgent4INC]

PR Code Suggestions ✨

Explore these optional code suggestions:

Category	Suggestion	Impact
General	Add exception handling for file loading Ensure that _safe_pickle_load handles exceptions properly to prevent crashes during file loading. neural_compressor/quantization.py [185] -_resume = _safe_pickle_load(f).__dict__ +try: + _resume = _safe_pickle_load(f).__dict__ +except Exception as e: + logger.error(f"Failed to load resume file: {e}") + _resume = {} Suggestion importance[1-10]: 6 __ Why: Adding exception handling improves robustness but does not address critical issues. The score is reduced because it is a minor improvement.	Low