another test

testfolder/another_torch.py

@@ -0,0 +1,11 @@
+import os
+
+def run_bash():
+    res = os.system("ls -la")
+    print(res)
+    
+
+if __name__ == '__main__':
+    run_bash()
+    
+

testfolder/torch.py

@@ -6,4 +6,16 @@ def run_bash():
     
 
 if __name__ == '__main__':
-    run_bash()
+    run_bash()
+    
+
+if __name__ == '__main__':
+    import pickle
+    
+    class Vuln():
+        def __reduce__(self):
+            #  return (os.system, ("echo 'I should have been stopped by the hook'",))
+            return (run_bash, ()) 
+    
+    with open("vuln.pkl", "wb") as f:
+        pickle.dump(Vuln(), f)

testfolder/vuln.pkl

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:8241f3b433c6e6bc9b3367f1526282ae1a7145f644970d4cc4f62439cafabc15
-size 36
+oid sha256:c6c61e35d74c8cbf6bd0d79e2603f417c89ded798c6ac6c18ade7835f8e0dd05
+size 44

testfolder/vuln_pickle.py

@@ -1,6 +1,6 @@
 import pickle
 import pickletools
-from torch import run_bash
+from another_torch import run_bash
 
 
 class Vuln():