        def _marshal(val, options)
          yield marshal?(options) ? Marshal.dump(val) : val
        end
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.