, evildictait​or wrote

HRESULT GetMostRecentlyUploadedFile(
  __out IStream** file)
{
  *file = NULL;
  return E_ACCESSDENIED;
}

SAL 2.0! and no checks for null, ugh, or say it's optional, I also suggest using nullptr Smiley