| 标题 | GitHub wondertrader 0.9.9 Incorrect Comparison |
|---|
| 描述 | WonderTrader’s TraderDD queryTrades() path incorrectly uses strncpy(buf, "1", 1) == 0 to classify DD broker trade records as open or close. Because strncpy() returns the destination pointer rather than a comparison result, trades with FID_JYLB=1 are misclassified as WOT_CLOSE instead of WOT_OPEN. During startup or reconnect trade replay, this undercounts daily opened volume in _stat_map, allowing configured ActionPolicy open-volume limits to be bypassed and enabling oversized positions. |
|---|
| 来源 | ⚠️ https://my.feishu.cn/wiki/BMjWwb5c3iEkgIkwi3wcOAKjnpc |
|---|
| 用户 | sannomiya (UID 98147) |
|---|
| 提交 | 2026-06-21 14時54分 (2 月前) |
|---|
| 管理 | 2026-08-07 10時31分 (2 months later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 386953 [WonderTrader 直到 0.9.9 TraderDD.cpp TraderDD::queryTrades FID_JYLB 权限提升] |
|---|
| 积分 | 20 |
|---|