ispcrt: removes CWD from the search path for LoadLibraryEx

Author: nurmukhametov

ispcrt/detail/cpu/CPUDevice.cpp

@@ -136,7 +136,9 @@ struct Module : public ispcrt::base::Module {
 #endif
             void *lib = nullptr;
 #if defined _WIN32
-            lib = LoadLibrary((m_file + ext).c_str());
+            // Removes CWD from the search path to reduce the risk of DLL injection.
+            SetDllDirectory("");
+            lib = LoadLibraryEx((m_file + ext).c_str(), NULL, 0);
 #else
             lib = dlopen(("lib" + m_file + ext).c_str(), RTLD_LAZY | RTLD_LOCAL);
 #endif

ispcrt/ispcrt.cpp

@@ -129,7 +129,9 @@ static OBJECT_T &referenceFromHandle(HANDLE_T handle) {
 // OS agnostic function to dynamically load a shared library.
 void *dyn_load_lib(const char *name, const char *name_major_version, const char *name_full_version) {
 #if defined(_WIN32) || defined(_WIN64)
-    return LoadLibrary(name);
+    // Removes CWD from the search path to reduce the risk of DLL injection.
+    SetDllDirectory("");
+    return LoadLibraryEx(name, NULL, 0);
 #else
     // Try to load a device library starting from the most specific name down to more general one.
     void *handle = dlopen(name_full_version, RTLD_NOW | RTLD_LOCAL);