From 05644a470303c2af3385b9533b8d23ebdea99eb7 Mon Sep 17 00:00:00 2001
From: Chunyang Dai <chunyang.dai@intel.com>
Date: Thu, 11 Apr 2024 23:51:33 +0800
Subject: [PATCH] [OpenCL] Config dependent-load flag to exclude CWD from DLL
 search path (#13327)

This change is to avoid DLL hijacking security issue.
---
 opencl/opencl-aot/CMakeLists.txt | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/opencl/opencl-aot/CMakeLists.txt b/opencl/opencl-aot/CMakeLists.txt
index ff905fd883e67..a05f094df971a 100644
--- a/opencl/opencl-aot/CMakeLists.txt
+++ b/opencl/opencl-aot/CMakeLists.txt
@@ -12,6 +12,11 @@ set(OPENCL_AOT_PROJECT_NAME opencl-aot)
 
 add_llvm_tool(${OPENCL_AOT_PROJECT_NAME} ${TARGET_SOURCES})
 
+if (WIN32)
+  # 0x2000: exclude CWD from DLL loading path
+  target_link_options(${OPENCL_AOT_PROJECT_NAME} PRIVATE "/DEPENDENTLOADFLAG:0x2000")
+endif()
+
 if(NOT MSVC)
   # FIXME: when built with clang it produces a warning.
   target_compile_options(${OPENCL_AOT_PROJECT_NAME} PRIVATE "-Wno-unused-parameter")