fix: DLL hijacking vulnerability in c2patool (CAI-8608)

[scouten-adobe]

No description provided.

[codspeed-hq]

Merging this PR will not alter performance

✅ 32 untouched benchmarks
⏩ 2 skipped benchmarks¹

---

_{Comparing CAI-8608/dll-hijacking-vuln (cfef630) with main (1982f5e)}

Footnotes

1. 2 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 77.70%. Comparing base (1982f5e) to head (cfef630).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2031   +/-   ##
=======================================
  Coverage   77.70%   77.70%           
=======================================
  Files         176      176           
  Lines       44645    44645           
=======================================
  Hits        34691    34691           
  Misses       9954     9954           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[tmathern]

https://learn.microsoft.com/en-us/windows/win32/api/libloaderapi/nf-libloaderapi-setdefaultdlldirectories

SetDefaultDllDirectories has a return value, a bool indicating success. Shouldn't the result of this call be checked then?

Should not fail, but while hardening...