CVE-apply：In Nanopb before versions 0.3.9.8 and 0.4.5, decoding a specifically formed message can cause invalid `free()` or `realloc()` calls if the message type contains an `oneof` field, and the `oneof` directly contains both a pointer field and a non-pointer field. about cdogs-sdl

[cxong]

Thanks, I believe this is low priority. C-Dogs SDL uses fixed message types, and none contain the exact specific message format problem (oneof directly contains both a pointer field and a non-pointer field) so it is impossible for users to exploit this.