提出 #864856: GitHub wondertrader 0.9.9 Incorrect Comparison情報

タイトルGitHub wondertrader 0.9.9 Incorrect Comparison
説明WonderTrader’s TraderDD queryTrades() path incorrectly uses strncpy(buf, "1", 1) == 0 to classify DD broker trade records as open or close. Because strncpy() returns the destination pointer rather than a comparison result, trades with FID_JYLB=1 are misclassified as WOT_CLOSE instead of WOT_OPEN. During startup or reconnect trade replay, this undercounts daily opened volume in _stat_map, allowing configured ActionPolicy open-volume limits to be bypassed and enabling oversized positions.
ソース⚠️ https://my.feishu.cn/wiki/BMjWwb5c3iEkgIkwi3wcOAKjnpc
ユーザー
 sannomiya (UID 98147)
送信2026年06月21日 14:54 (2 月 ago)
モデレーション2026年08月07日 10:31 (2 months later)
ステータス承諾済み
VulDBエントリ386953 [WonderTrader 迄 0.9.9 TraderDD.cpp TraderDD::queryTrades FID_JYLB 特権昇格]
ポイント20

Interested in the pricing of exploits?

See the underground prices here!