diff --git a/src/version.c b/src/version.c
index f1534f1..4e6435c 100644
--- a/src/version.c
+++ b/src/version.c
@@ -751,6 +751,8 @@
 static int included_patches[] =
 {   /* Add new patch number below this line */
 /**/
+    2736,
+/**/
     2735,
 /**/
     2734,
diff --git a/src/vim9execute.c b/src/vim9execute.c
index d3e2af7..d6c4764 100644
--- a/src/vim9execute.c
+++ b/src/vim9execute.c
@@ -2792,12 +2792,11 @@
 		    else if (ltv->v_type == VAR_STRING)
 		    {
 			char_u	*str = ltv->vval.v_string;
-			int	len = str == NULL ? 0 : (int)STRLEN(str);
 
 			// Push the next character from the string.  The index
 			// is for the last byte of the previous character.
 			++idxtv->vval.v_number;
-			if (idxtv->vval.v_number >= len)
+			if (str == NULL || str[idxtv->vval.v_number] == NUL)
 			{
 			    // past the end of the string, jump to "endfor"
 			    ectx.ec_iidx = iptr->isn_arg.forloop.for_end;