Отправить #864856: GitHub wondertrader 0.9.9 Incorrect ComparisonИнформация

НазваниеGitHub wondertrader 0.9.9 Incorrect Comparison
ОписаниеWonderTrader’s TraderDD queryTrades() path incorrectly uses strncpy(buf, "1", 1) == 0 to classify DD broker trade records as open or close. Because strncpy() returns the destination pointer rather than a comparison result, trades with FID_JYLB=1 are misclassified as WOT_CLOSE instead of WOT_OPEN. During startup or reconnect trade replay, this undercounts daily opened volume in _stat_map, allowing configured ActionPolicy open-volume limits to be bypassed and enabling oversized positions.
Источник⚠️ https://my.feishu.cn/wiki/BMjWwb5c3iEkgIkwi3wcOAKjnpc
Пользователь
 sannomiya (UID 98147)
Представление21.06.2026 14:54 (2 месяцы назад)
Модерация07.08.2026 10:31 (2 months later)
Статуспринято
Запись VulDB386953 [WonderTrader до 0.9.9 TraderDD.cpp TraderDD::queryTrades FID_JYLB эскалация привилегий]
Баллы20

Want to know what is going to be exploited?

We predict KEV entries!