amyanger 87657c6297 fix(model): admit safetensors header lengths that resemble pickle markers (#5918) ...

A safetensors length prefix such as 640 encodes as 80 02 00 ..., which the
provider read as a pickle PROTO marker and refused before the safetensors
parser ran. The parser that owns the length prefix now makes the call: a
pickle-like prefix is safetensors only when byte 8 is '{' and the declared
length is within the safetensors header ceiling. Real pickles stay refused
and are never deserialized.

Fixes #5895

2026-10-23 02:22:58 +08:00

..

modelArtifact.test.ts

fix(model): admit safetensors header lengths that resemble pickle markers (#5918)

2026-10-23 02:22:58 +08:00

modelArtifactPartialCancellation.test.ts

…