cppcheck-opensource
diff --git a/‎lib/tokenize.cpp‎
Lines changed: 4 additions & 1 deletion b/‎lib/tokenize.cpp‎
Lines changed: 4 additions & 1 deletion
diff --git a/‎test/testgarbage.cpp‎
Lines changed: 4 additions & 0 deletions b/‎test/testgarbage.cpp‎
Lines changed: 4 additions & 0 deletions
@@ -4286,7 +4286,10 @@ void Tokenizer::setVarIdPass2()
         while (Token::Match(tokStart, ":: %name%") || tokStart->str() == "<") {
             if (tokStart->str() == "<") {
                 // skip the template part
-                tokStart = tokStart->findClosingBracket()->next();
+                const Token* closeTok = tokStart->findClosingBracket();
+                if (!closeTok)
+                    syntaxError(tok);
+                tokStart = closeTok->next();
             } else {
                 classnameTokens.push_back(tokStart->next());
                 tokStart = tokStart->tokAt(2);
 
@@ -250,6 +250,7 @@ class TestGarbage : public TestFixture {
         TEST_CASE(garbageCode218); // #8763
         TEST_CASE(garbageCode219); // #10101
         TEST_CASE(garbageCode220); // #6832
+        TEST_CASE(garbageCode221);
 
         TEST_CASE(garbageCodeFuzzerClientMode1); // test cases created with the fuzzer client, mode 1
 
@@ -1704,6 +1705,9 @@ class TestGarbage : public TestFixture {
     void garbageCode220() { // #6832
         ASSERT_THROW(checkCode("(){(){{()}}return;{switch()0 case(){}break;l:()}}\n"), InternalError);  // don't crash
     }
+    void garbageCode221() {
+        ASSERT_THROW(checkCode("struct A<0<;\n"), InternalError);  // don't crash
+    }
 
     void syntaxErrorFirstToken() {
         ASSERT_THROW(checkCode("&operator(){[]};"), InternalError); // #7818