| Titel | GitHub wondertrader 0.9.9 Use of Uninitialized Variable |
|---|
| Beschreibung | WonderTrader’s TraderATP cash trade conversion creates WTSTradeInfo records without setting offsetType, while WTSTradeInfo does not initialize m_offsetType in its constructor. As a result, ATP cash trade reports can inherit stale open/close state from reused object-pool memory. A cash sell report may therefore be interpreted by the core as WDT_SHORT + WOT_OPEN and recorded as short-open volume instead of the expected long-close volume, corrupting trade statistics, position semantics, and downstream strategy or risk-control decisions. |
|---|
| Quelle | ⚠️ https://my.feishu.cn/wiki/PyAuwg8Bwit3TBk5DgLc14Ghnkb?from=from_copylink |
|---|
| Benutzer | sannomiya (UID 98147) |
|---|
| Einreichung | 21.06.2026 15:23 (vor 2 Monaten) |
|---|
| Moderieren | 07.08.2026 10:39 (2 months later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 386957 [WonderTrader bis 0.9.9 TraderATP Cash Trade Conversion WTSTradeDef.hpp m_offsetType Denial of Service] |
|---|
| Punkte | 20 |
|---|