Fix crash in parseJsxChild found by fuzzing (#53674)

Author: jakebailey

src/compiler/parser.ts

@@ -6013,7 +6013,7 @@ namespace Parser {
                     // We want the error span to cover only 'Foo.Bar' in < Foo.Bar >
                     // or to cover only 'Foo' in < Foo >
                     const tag = openingTag.tagName;
-                    const start = skipTrivia(sourceText, tag.pos);
+                    const start = Math.min(skipTrivia(sourceText, tag.pos), tag.end);
                     parseErrorAt(start, tag.end, Diagnostics.JSX_element_0_has_no_corresponding_closing_tag, getTextOfNodeFromSourceText(sourceText, openingTag.tagName));
                 }
                 return undefined;

tests/baselines/reference/parseJsxElementInUnaryExpressionNoCrash3.errors.txt

@@ -0,0 +1,18 @@
+tests/cases/compiler/a.js(1,3): error TS17008: JSX element '' has no corresponding closing tag.
+tests/cases/compiler/a.js(1,4): error TS1003: Identifier expected.
+tests/cases/compiler/a.js(1,5): error TS1005: '...' expected.
+tests/cases/compiler/a.js(3,1): error TS1005: '</' expected.
+
+
+==== tests/cases/compiler/a.js (4 errors) ====
+    !< {:>
+      
+!!! error TS17008: JSX element '' has no corresponding closing tag.
+       ~
+!!! error TS1003: Identifier expected.
+        ~
+!!! error TS1005: '...' expected.
+    
+    
+    
+!!! error TS1005: '</' expected.

tests/baselines/reference/parseJsxElementInUnaryExpressionNoCrash3.js

@@ -0,0 +1,9 @@
+//// [a.js]
+!< {:>
+
+
+
+//// [a.js]
+!< {...}>
+
+</>;

tests/baselines/reference/parseJsxElementInUnaryExpressionNoCrash3.symbols

@@ -0,0 +1,5 @@
+=== tests/cases/compiler/a.js ===
+
+!< {:>
+
+

tests/baselines/reference/parseJsxElementInUnaryExpressionNoCrash3.types

@@ -0,0 +1,10 @@
+=== tests/cases/compiler/a.js ===
+!< {:>
+>!< {:> : boolean
+>< {:> : any
+> : any
+> : any
+
+
+> : any
+

tests/cases/compiler/parseJsxElementInUnaryExpressionNoCrash3.ts

@@ -0,0 +1,5 @@
+// @allowJs: true
+// @outDir: ./out
+// @filename: a.js
+!< {:>
+