[closure-devel] Array access out of bounds in Closure HTML's sgml parser