Fixed buffer overrun in template parsing.

docs/notework.rus

@@ -10,6 +10,7 @@ _____________________________________________________________________________
                ‡ ¬¥âª¨ ¤«ï GoldED+ 1.1.5, /snapshot/
 _____________________________________________________________________________
 
+- Golded+ ¬®£ 㯠áâì ¢® ¢à¥¬ï ¯ àᨭ£  ⥬¯«¥©â  ¨§-§  ¢ë室  §  £à ­¨æã ¡ãä¥à .
 + <20>®¤¤¥à¦ª  ª¥©¢®à¤  'set' ¢ fidoconfig-¥.
 - Golded+ ¬®£ 㯠áâì ¢® ¢à¥¬ï ¯ àᨭ£  fidoconfig- .
 - ˆá¯à ¢«¥­ ¡ £ ¢ á⥪¥ ®âª â  । ªâ®à , ¯à¨ ª®â®à®¬ £®«¤¥¤ ¯à®¡®¢ « ¯à®ç¥áâì ¯® 

docs/notework.txt

@@ -10,6 +10,8 @@ ______________________________________________________________________
                Notes for GoldED+ 1.1.5, /snapshot/
 ______________________________________________________________________
 
+- Fixed buffer overrun in template parsing.
+
 + Support for keyword 'set' in fidoconfig.
 
 - Golded+ can crash when parsing fidoconfig.

golded3/gemsgs.cpp

@@ -62,7 +62,8 @@ static bool tokenxchg(std::string &input, std::string::iterator &pos,
       for (int i = 0; i < cnt; i++)
       {
         std::string::iterator beg = tokend;
-        if (*beg++ != '{') break;
+        if ((beg == input.end()) || (*beg++ != '{'))
+          break;
 
         std::string::iterator end;
         for (end = beg; end != input.end(); end++)