mirror of
https://github.com/github/codeql.git
synced 2026-03-30 20:28:15 +02:00
85283d63ce
Calling a function of the CreatePorcess* family of functions, which may result in a security vulnerability if the path contains spaces.
11 lines
278 B
C++
11 lines
278 B
C++
STARTUPINFOW si;
|
|
PROCESS_INFORMATION pi;
|
|
|
|
// ...
|
|
|
|
CreateProcessW( // BUG
|
|
NULL, // lpApplicationName
|
|
(LPWSTR)L"C:\\Program Files\\MyApp", // lpCommandLine
|
|
NULL, NULL, FALSE, 0, NULL, NULL, &si, &pi);
|
|
|
|
// ...
|