From 2fc30e3c845fb37e954ca4d9630c5050551ea2ce Mon Sep 17 00:00:00 2001
From: chrchr-github <78114321+chrchr-github@users.noreply.github.com>
Date: Fri, 3 Jul 2026 13:17:31 +0200
Subject: [PATCH 1/2] Update templatesimplifier.cpp

---
 lib/templatesimplifier.cpp | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/lib/templatesimplifier.cpp b/lib/templatesimplifier.cpp
index 4051b05c204..6fdd423628b 100644
--- a/lib/templatesimplifier.cpp
+++ b/lib/templatesimplifier.cpp
@@ -170,8 +170,12 @@ TemplateSimplifier::TokenAndName::TokenAndName(Token *token, std::string scope,
                 if (isFunction())
                     tok1 = tok1->link()->next();
                 while (tok1 && !Token::Match(tok1, ";|{")) {
-                    if (tok1->str() == "<")
-                        tok1 = tok1->findClosingBracket();
+                    if (tok1->str() == "<") {
+                        if (const Token* closing = tok1->findClosingBracket())
+                            tok1 = closing;
+                        else
+                            syntaxError(tok1);
+                    }
                     else if (Token::Match(tok1, "(|[") && tok1->link())
                         tok1 = tok1->link();
                     if (tok1)

From 4c7643fcb5810b2fdbdda3a64d4e84606c40902c Mon Sep 17 00:00:00 2001
From: chrchr-github <78114321+chrchr-github@users.noreply.github.com>
Date: Fri, 3 Jul 2026 13:18:56 +0200
Subject: [PATCH 2/2] Create timeout-5225c0e6e895cdd05a15c388547d13a78a2574e2

---
 .../timeout-5225c0e6e895cdd05a15c388547d13a78a2574e2             | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 test/cli/fuzz-timeout/timeout-5225c0e6e895cdd05a15c388547d13a78a2574e2

diff --git a/test/cli/fuzz-timeout/timeout-5225c0e6e895cdd05a15c388547d13a78a2574e2 b/test/cli/fuzz-timeout/timeout-5225c0e6e895cdd05a15c388547d13a78a2574e2
new file mode 100644
index 00000000000..71e751bb201
--- /dev/null
+++ b/test/cli/fuzz-timeout/timeout-5225c0e6e895cdd05a15c388547d13a78a2574e2
@@ -0,0 +1 @@
+template<t>struct e<j><;