关于使用CreateProcess,执行一个CMD指令遇到的问题，很着急，请大家帮忙啊，谢谢！

[VCILOVE]

关于使用CreateProcess,执行一个CMD指令遇到的问题，很着急，请大家帮忙啊，谢谢！
char strCommandLine[200] = "cmd /c C:\\Progra~1\\mytest\\mytest.exe";
if( !CreateProcess( NULL, // No module name (use command line).
strCommandLine,
NULL, // Process handle not inheritable.
NULL, // Thread handle not inheritable.
FALSE, // Set handle inheritance to FALSE.
CREATE_NO_WINDOW, // No creation flags.
NULL, // Use parent's environment block.
NULL, // Use parent's starting directory.
&si, // Pointer to STARTUPINFO structure.
&pi // Pointer to PROCESS_INFORMATION structure.
)
)
{
bReturnVal = FALSE;
}
else
{
WaitForSingleObject( pi.hProcess, INFINITE );
CloseHandle( pi.hProcess );
CloseHandle( pi.hThread );
}

如果把strCommandLine中的C:\\Progra~1换成C:\\Program Files，其他的不变，就提示出错，也就是说，只要有空格，就会报错，请问怎么处理这个问题，因为可能路径不会是固定的，万一有空格就会失败了，请大家帮忙啊，谢谢！

[NetDNASupport]

char strCommandLine[200] = "cmd /c \"C:\\Program Files\\mytest\\mytest.exe\"";

[ringphone]

楼上正解，如果两边不加""，必须采用8.3文件名格式，可用GetShortPathName得到。

[idAnts]

msdn里都说了:
The first parameter, lpApplicationName, can be NULL, in which case the executable name must be in the white space-delimited string pointed to by lpCommandLine. If the executable or path name has a space in it, there is a risk that a different executable could be run because of the way the function parses spaces. The following example is dangerous because the function will attempt to run "Program.exe", if it exists, instead of "MyApp.exe".

CreateProcess(NULL, "C:\\Program Files\\MyApp", ...)
If a malicious user were to create an application called "Program.exe" on a system, any program that incorrectly calls CreateProcess using the Program Files directory will run this application instead of the intended application.

To avoid this problem, do not pass NULL for lpApplicationName. If you do pass NULL for lpApplicationName, use quotation marks around the executable path in lpCommandLine, as shown in the example below.

CreateProcess(NULL, "\"C:\\Program Files\\MyApp.exe\" -L -S", ...)