Fix #13166 fuzzing crash (heap-use-after-free) in Tokenizer::simplifyTypedefCpp() (danmar#6905)

Author: chrchr-github

lib/tokenize.cpp

@@ -1528,6 +1528,11 @@ void Tokenizer::simplifyTypedefCpp()
             argEnd = tokOffset->linkAt(1);
             if (!argEnd)
                 syntaxError(argStart);
+            const Token* tok2 = argEnd->next();
+            while (tok2 && (tok2->isKeyword() || tok2->str() == ")"))
+                tok2 = tok2->next();
+            if (!Token::simpleMatch(tok2, ";"))
+                syntaxError(tok2);
 
             tok = argEnd->next();
             Token *spec = tok;

test/cli/fuzz-crash/crash-8e34edab2458422d12e1b796686205a80760dbcb

@@ -0,0 +1 @@
+typedef e*(C)()const C;