[Security] fix draw security problem (PaddlePaddle#61161) (PaddlePadd…

…le#61338)

* fix draw security problem

python/paddle/base/framework.py

@@ -5568,8 +5568,7 @@ def draw(self, save_path, name, marked_nodes=None, remove_ctr_var=True):
         def _convert_to_pdf(dot_file_path):
             pdf_save_path = os.path.splitext(dot_file_path)[0] + '.pdf'
             exited_code = subprocess.call(
-                'dot -Tpdf ' + dot_file_path + ' -o ' + pdf_save_path,
-                shell=True,
+                ['dot', '-Tpdf', dot_file_path, '-o', pdf_save_path]
             )
             if exited_code != 0:
                 print('The dot command is needed for creating pdf files.')