Fixed another out of range error when 0 is used as a terminator

Author: jschick04

src/EventLogExpert.Eventing.Tests/EventResolvers/EventResolverBaseTests.cs

@@ -779,6 +779,86 @@ public void ResolveEvent_WithZeroKeywords_ShouldReturnEmptyKeywordList()
         Assert.Empty(displayEvent.Keywords);
     }
 
+    [Fact]
+    public void ResolveEvent_WithPercentZeroTerminator_ShouldSkipTerminatorAndResolveDescription()
+    {
+        // Arrange - %0 is a Windows Event Log message terminator that should be stripped
+        var providerDetails = new ProviderDetails
+        {
+            ProviderName = Constants.TestProviderName,
+            Events = [],
+            Messages =
+            [
+                new MessageModel
+                {
+                    ProviderName = Constants.TestProviderName,
+                    ShortId = 1000,
+                    Text = "Windows Search Service has created default configuration for new user '%1' .%n%0"
+                }
+            ],
+            Parameters = [],
+            Keywords = new Dictionary<long, string>(),
+            Tasks = new Dictionary<int, string>()
+        };
+
+        var resolver = new TestEventResolver([providerDetails]);
+
+        var eventRecord = new EventRecord
+        {
+            ProviderName = Constants.TestProviderName,
+            Id = 1000,
+            Properties = ["TestUser", "ExtraProperty"]
+        };
+
+        // Act - should not throw and should produce valid description
+        var displayEvent = resolver.ResolveEvent(eventRecord);
+
+        // Assert
+        Assert.NotNull(displayEvent);
+        Assert.Contains("TestUser", displayEvent.Description);
+        Assert.DoesNotContain("%0", displayEvent.Description);
+        Assert.DoesNotContain("Failed to resolve", displayEvent.Description);
+    }
+
+    [Fact]
+    public void ResolveEvent_WithPropertyIndexOutOfRange_ShouldReturnFailedDescription()
+    {
+        // Arrange - template references %3 but only 2 properties exist
+        var providerDetails = new ProviderDetails
+        {
+            ProviderName = Constants.TestProviderName,
+            Events = [],
+            Messages =
+            [
+                new MessageModel
+                {
+                    ProviderName = Constants.TestProviderName,
+                    ShortId = 1000,
+                    Text = "Property1: %1, Property2: %2, Property3: %3"
+                }
+            ],
+            Parameters = [],
+            Keywords = new Dictionary<long, string>(),
+            Tasks = new Dictionary<int, string>()
+        };
+
+        var resolver = new TestEventResolver([providerDetails]);
+
+        var eventRecord = new EventRecord
+        {
+            ProviderName = Constants.TestProviderName,
+            Id = 1000,
+            Properties = ["Value1", "Value2"] // Only 2 properties, but template expects 3
+        };
+
+        // Act
+        var displayEvent = resolver.ResolveEvent(eventRecord);
+
+        // Assert
+        Assert.NotNull(displayEvent);
+        Assert.Contains("Failed to resolve", displayEvent.Description);
+    }
+
     private class TestEventResolver : EventResolverBase, IEventResolver
     {
         public TestEventResolver(IEventResolverCache? cache = null, ITraceLogger? logger = null)

src/EventLogExpert.Eventing/EventResolvers/EventResolverBase.cs

@@ -371,7 +371,15 @@ private string FormatDescription(
 
                 if (!propString.StartsWith("%%") && int.TryParse(propString.Trim(['{', '}', '%']), out var propIndex))
                 {
-                    if (propIndex - 1 >= properties.Count)
+                    // %0 is a Windows Event Log message terminator - skip it entirely
+                    if (propIndex == 0)
+                    {
+                        lastIndex = match.Index + match.Length;
+
+                        continue;
+                    }
+
+                    if (propIndex > properties.Count)
                     {
                         Logger?.Trace($"{nameof(FormatDescription)}: Property index out of range - RequestedIndex={propIndex}, PropertyCount={properties.Count}, Template={descriptionTemplate}",
                             LogLevel.Warning);