NULL application name with an unquoted path in call to '%1$ls': results in a security vulnerability if the path contains ...