| 제목 | GitHub wondertrader 0.9.9 Incorrect Comparison |
|---|
| 설명 | WonderTrader’s TraderDD queryTrades() path incorrectly uses strncpy(buf, "1", 1) == 0 to classify DD broker trade records as open or close. Because strncpy() returns the destination pointer rather than a comparison result, trades with FID_JYLB=1 are misclassified as WOT_CLOSE instead of WOT_OPEN. During startup or reconnect trade replay, this undercounts daily opened volume in _stat_map, allowing configured ActionPolicy open-volume limits to be bypassed and enabling oversized positions. |
|---|
| 원천 | ⚠️ https://my.feishu.cn/wiki/BMjWwb5c3iEkgIkwi3wcOAKjnpc |
|---|
| 사용자 | sannomiya (UID 98147) |
|---|
| 제출 | 2026. 06. 21. PM 02:54 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 08. 07. AM 10:31 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 386953 [WonderTrader 까지 0.9.9 TraderDD.cpp TraderDD::queryTrades FID_JYLB 권한 상승] |
|---|
| 포인트들 | 20 |
|---|