Fix initial maxslot for down-recursive traces.

diff --git a/src/lj_record.c b/src/lj_record.c
index 60caf10d53bc82924afff38eee32c071f45cdf58..f98b0a4caea54602ef526f30f41c14f594c2265a 100644 (file)
--- a/src/lj_record.c
+++ b/src/lj_record.c
@@ -2131,7 +2131,7 @@ static const BCIns *rec_setup_root(jit_State *J)
   case BC_RET0:
   case BC_RET1:
     /* No bytecode range check for down-recursive root traces. */
-    J->maxslot = ra + bc_d(ins);
+    J->maxslot = ra + bc_d(ins) - 1;
     break;
   case BC_FUNCF:
     /* No bytecode range check for root traces started by a hot call. */