math is hard - check the bounds of a string properly when looking to see if a closing } exists

2014-06-18 16:53:40 -07:00
parent 868b5b49eb
commit 40e86247ad
1 changed files with 1 additions and 1 deletions
@@ -163,7 +163,7 @@ class Mustache_Tokenizer
                        if ($this->tagType === self::T_UNESCAPED) {
                            // Clean up `{{{ tripleStache }}}` style tokens.
                            if ($this->ctag === '}}') {
-                                if (($i < $len + 1) && $text[$i+2] == '}') {
+                                if (($i+2 < $len) && $text[$i+2] == '}') {
                                    $i++;
                                } else {
                                    $msg = sprintf(