Skip to content

Commit 87e0b7a

Browse files
Updated C6277
Updated to the new format
1 parent b321bf3 commit 87e0b7a

File tree

1 file changed

+9
-7
lines changed

1 file changed

+9
-7
lines changed

docs/code-quality/c6277.md

Lines changed: 9 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,21 +1,23 @@
11
---
22
description: "Learn more about: C6277"
33
title: C6277
4-
ms.date: 11/04/2016
4+
ms.date: 08/16/2022
55
ms.topic: reference
6-
f1_keywords: ["C6277"]
6+
f1_keywords: ["C6277", "CREATEPROCESS_ESCAPE", "__WARNING_CREATEPROCESS_ESCAPE"]
77
helpviewer_keywords: ["C6277"]
88
ms.assetid: 2b41252a-68c2-4e92-b005-0458db5f4430
99
---
10-
# C6277
10+
# Warning C6277
1111

12-
**Warning C6277: CreateProcess Escape (CREATEPROCESS_ESCAPE)**\
13-
Example output:
1412
> NULL application name with an unquoted path in call to '\**function-name*': results in a security vulnerability if the path contains spaces
1513
16-
## Description
14+
This warning indicates that the application name parameter is null and that there might be spaces in the executable path name.
1715

18-
This warning indicates that the application name parameter is null and that there might be spaces in the executable path name. Unless the executable name is "fully qualified," there's likely to be a security problem. A malicious user could insert a rogue executable with the same name earlier in the path. To correct this warning, you can specify the application name instead of passing null. Alternatively, if you do pass null for the application name, use quotation marks around the executable path.
16+
## Remarks
17+
18+
Unless the executable name is "fully qualified," there's likely to be a security problem. A malicious user could insert a rogue executable with the same name earlier in the path. To correct this warning, you can specify the application name instead of passing null. Alternatively, if you do pass null for the application name, use quotation marks around the executable path.
19+
20+
Code analysis name: CREATEPROCESS_ESCAPE
1921

2022
## Example
2123

0 commit comments

Comments
 (0)