| tiêu đề | GitHub wondertrader 0.9.9 Incorrect Control Flow |
|---|
| Mô tả | WonderTrader, a C++-based quantitative trading framework designed for full-market, multi-asset trading workflows, contains an logic vulnerability in v0.9.9: incorrect variable use in MatchEngine::update_lob() within src/WtBtCore/MatchEngine.cpp. When constructing the internal limit order book cache, the function maps bid-side price levels to askqty(i) instead of bidqty(i), causing bid-side market depth to be recorded with ask-side quantities. In a professional trading framework that covers data processing, backtesting, live trading, and operations scheduling, this can corrupt backtesting order book state and produce misleading liquidity assumptions when bid and ask depths differ. |
|---|
| Nguồn | ⚠️ https://my.feishu.cn/wiki/BXljwvHSLiiqiSkI7jScIqkSn4c |
|---|
| Người dùng | sannomiya (UID 98147) |
|---|
| Đệ trình | 19/06/2026 16:01 (cách đây 2 các tháng) |
|---|
| Kiểm duyệt | 06/08/2026 07:51 (2 months later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 386456 [WonderTrader đến 0.9.9 Internal Limit Order Book Cache MatchEngine.cpp MatchEngine::update_lob nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|