| Título | GitHub wondertrader 0.9.9 Incorrect Comparison |
|---|
| Descrição | WonderTrader’s TraderDD queryTrades() path incorrectly uses strncpy(buf, "1", 1) == 0 to classify DD broker trade records as open or close. Because strncpy() returns the destination pointer rather than a comparison result, trades with FID_JYLB=1 are misclassified as WOT_CLOSE instead of WOT_OPEN. During startup or reconnect trade replay, this undercounts daily opened volume in _stat_map, allowing configured ActionPolicy open-volume limits to be bypassed and enabling oversized positions. |
|---|
| Fonte | ⚠️ https://my.feishu.cn/wiki/BMjWwb5c3iEkgIkwi3wcOAKjnpc |
|---|
| Utilizador | sannomiya (UID 98147) |
|---|
| Submissão | 21/06/2026 14h54 (há 2 meses) |
|---|
| Moderação | 07/08/2026 10h31 (2 months later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 386953 [WonderTrader até 0.9.9 TraderDD.cpp TraderDD::queryTrades FID_JYLB Elevação de Privilégios] |
|---|
| Pontos | 20 |
|---|