| Titre | GitHub wondertrader 0.9.9 Incorrect Comparison |
|---|
| Description | WonderTrader’s TraderDD queryTrades() path incorrectly uses strncpy(buf, "1", 1) == 0 to classify DD broker trade records as open or close. Because strncpy() returns the destination pointer rather than a comparison result, trades with FID_JYLB=1 are misclassified as WOT_CLOSE instead of WOT_OPEN. During startup or reconnect trade replay, this undercounts daily opened volume in _stat_map, allowing configured ActionPolicy open-volume limits to be bypassed and enabling oversized positions. |
|---|
| La source | ⚠️ https://my.feishu.cn/wiki/BMjWwb5c3iEkgIkwi3wcOAKjnpc |
|---|
| Utilisateur | sannomiya (UID 98147) |
|---|
| Soumission | 21/06/2026 14:54 (il y a 2 mois) |
|---|
| Modérer | 07/08/2026 10:31 (2 months later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 386953 [WonderTrader jusqu’à 0.9.9 TraderDD.cpp TraderDD::queryTrades FID_JYLB élévation de privilèges] |
|---|
| Points | 20 |
|---|