From 484ebabeb2aa808d4b9ceeaaaea46f965391d57c Mon Sep 17 00:00:00 2001
From: "jan.nijtmans" <nijtmans@users.sourceforge.net>
Date: Thu, 18 Sep 2025 09:35:47 +0000
Subject: Fix [77059c4f45]: TclPushVarName(): pointer overflow

---
 generic/tclCompCmds.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/generic/tclCompCmds.c b/generic/tclCompCmds.c
index 6c66278..31ab7d0 100644
--- a/generic/tclCompCmds.c
+++ b/generic/tclCompCmds.c
@@ -3526,7 +3526,7 @@ TclPushVarName(
 
 	name = varTokenPtr[1].start;
 	nameLen = varTokenPtr[1].size;
-	if (name[nameLen-1] == ')') {
+	if (nameLen > 0 && name[nameLen-1] == ')') {
 	    /*
 	     * last char is ')' => potential array reference.
 	     */
-- 
cgit v0.12