PickleBall: Secure Deserialization of Pickle-based Machine Learning Models (Extended Report)