Fix predict_next() in parser.

Reported by Sergey Kaplun. #1033

diff --git a/src/lj_parse.c b/src/lj_parse.c
index 57eb11cc226d01fa2c3ff1881e762072dd6098df..493a3e24f3b502fa98daa8ebeaf4a83f090e6079 100644 (file)
--- a/src/lj_parse.c
+++ b/src/lj_parse.c
@@ -2532,6 +2532,7 @@ static int predict_next(LexState *ls, FuncState *fs, BCPos pc)
   cTValue *o;
   switch (bc_op(ins)) {
   case BC_MOV:
+    if (bc_d(ins) >= fs->nactvar) return 0;
     name = gco2str(gcref(var_get(ls, fs, bc_d(ins)).name));
     break;
   case BC_UGET: