The strings were concatenated, making it impossible to match the path.

Source can query the fileName.
Sink can also query data.
Logic can be connected.
But no results were found.
The test from fileName to FileUtils.isValidFilename can retrieve results.
However, when querying from fileName to writeBytes, no results are returned. The data passes through the line "String filePath = Global.getDownloadPath() + fileName;" in the middle.



Start by tracing the reported flow from fileName through "String filePath = Global.getDownloadPath() + fileName;" to writeBytes, and compare it with the path to FileUtils.isValidFilename. Inspect how the CodeQL data-flow query handles the concatenation, then verify that the fileName-to-writeBytes query returns a result while the existing path remains covered.

Scritto dal modello di indicizzazione a partire dal testo della issue.