| Title | GitHub wondertrader 0.9.9 Use of Uninitialized Variable |
|---|
| Description | WonderTrader’s TraderATP cash trade conversion creates WTSTradeInfo records without setting offsetType, while WTSTradeInfo does not initialize m_offsetType in its constructor. As a result, ATP cash trade reports can inherit stale open/close state from reused object-pool memory. A cash sell report may therefore be interpreted by the core as WDT_SHORT + WOT_OPEN and recorded as short-open volume instead of the expected long-close volume, corrupting trade statistics, position semantics, and downstream strategy or risk-control decisions. |
|---|
| Source | ⚠️ https://my.feishu.cn/wiki/PyAuwg8Bwit3TBk5DgLc14Ghnkb?from=from_copylink |
|---|
| User | sannomiya (UID 98147) |
|---|
| Submission | 06/21/2026 15:23 (2 months ago) |
|---|
| Moderation | 08/07/2026 10:39 (2 months later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 386957 [WonderTrader up to 0.9.9 TraderATP Cash Trade Conversion WTSTradeDef.hpp m_offsetType uninitialized variable] |
|---|
| Points | 20 |
|---|