https://gcc.gnu.org/bugzilla/show_bug.cgi?id=110862
--- Comment #4 from CVS Commits <cvs-commit at gcc dot gnu.org> --- The master branch has been updated by Jonathan Wakely <r...@gcc.gnu.org>: https://gcc.gnu.org/g:5d87f71bb462ccb78dd3d9d810ea08d96869cb4b commit r14-3066-g5d87f71bb462ccb78dd3d9d810ea08d96869cb4b Author: Jonathan Wakely <jwak...@redhat.com> Date: Thu Aug 3 08:45:43 2023 +0100 libstdc++: Fix past-the-end increment in std::format [PR110862] At the end of a replacement field we should check that the closing brace is actually present before incrementing past it. libstdc++-v3/ChangeLog: PR libstdc++/110862 * include/std/format (_Scanner::_M_on_replacement_field): Check for expected '}' before incrementing iterator. * testsuite/std/format/string.cc: Check "{0:{0}" format string.