Avoid ArrayIndexOutOfBoundsException in SpEL's Indexer

When index == arrayLength, the array index is also out of bounds.

For this scenario, a SpelEvaluationException should be thrown instead
of ArrayIndexOutOfBoundsException.

Closes gh-23658

spring-expression/src/main/java/org/springframework/expression/spel/ast/Indexer.java

@@ -439,7 +439,7 @@ else if (arrayComponentType == Short.TYPE) {
 	}
 
 	private void checkAccess(int arrayLength, int index) throws SpelEvaluationException {
-		if (index > arrayLength) {
+		if (index >= arrayLength) {
 			throw new SpelEvaluationException(getStartPosition(), SpelMessage.ARRAY_INDEX_OUT_OF_BOUNDS,
 					arrayLength, index);
 		}

spring-expression/src/test/java/org/springframework/expression/spel/ast/IndexerTests.java

@@ -0,0 +1,23 @@
+package org.springframework.expression.spel.ast;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.expression.EvaluationException;
+import org.springframework.expression.spel.standard.SpelExpression;
+import org.springframework.expression.spel.standard.SpelExpressionParser;
+import org.springframework.expression.spel.support.SimpleEvaluationContext;
+import org.springframework.expression.spel.testresources.Inventor;
+
+import static org.assertj.core.api.Assertions.assertThatExceptionOfType;
+
+/**
+ * @author Joyce Zhan
+ */
+public class IndexerTests {
+	@Test
+	public void testAccess() {
+		SimpleEvaluationContext context = SimpleEvaluationContext.forReadOnlyDataBinding().build();
+		SpelExpression expression = (SpelExpression) new SpelExpressionParser().parseExpression("stringArrayOfThreeItems[3]");
+		assertThatExceptionOfType(EvaluationException.class).isThrownBy(() ->
+				expression.getValue(context, new Inventor()));
+	}
+}