From caf7cbc57c945f7b68871ad72abafb2b6e6fb7f5 Mon Sep 17 00:00:00 2001
From: Mike Pall <mike>
Date: Sat, 12 Aug 2023 16:21:41 +0200
Subject: [PATCH] Fix predict_next() in parser.

Reported by Sergey Kaplun. #1033
---
 src/lj_parse.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/lj_parse.c b/src/lj_parse.c
index 57eb11cc..493a3e24 100644
--- a/src/lj_parse.c
+++ b/src/lj_parse.c
@@ -2532,6 +2532,7 @@ static int predict_next(LexState *ls, FuncState *fs, BCPos pc)
   cTValue *o;
   switch (bc_op(ins)) {
   case BC_MOV:
+    if (bc_d(ins) >= fs->nactvar) return 0;
     name = gco2str(gcref(var_get(ls, fs, bc_d(ins)).name));
     break;
   case BC_UGET: