From 32984282ddae666b3c94cd27538e1c78b49a1877 Mon Sep 17 00:00:00 2001
From: Mike Pall <mike>
Date: Thu, 21 Jul 2022 17:30:56 +0200
Subject: [PATCH] Prevent trace start at BC_ITERL after compiled BC_ITERN.

Reported by ccagml.
---
 src/lj_record.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/lj_record.c b/src/lj_record.c
index 9c85f9f7..92bdbfc9 100644
--- a/src/lj_record.c
+++ b/src/lj_record.c
@@ -2665,6 +2665,8 @@ static const BCIns *rec_setup_root(jit_State *J)
     J->bc_min = pc;
     break;
   case BC_ITERL:
+    if (bc_op(pc[-1]) == BC_JLOOP)
+      lj_trace_err(J, LJ_TRERR_LINNER);
     lj_assertJ(bc_op(pc[-1]) == BC_ITERC, "no ITERC before ITERL");
     J->maxslot = ra + bc_b(pc[-1]) - 1;
     J->bc_extent = (MSize)(-bc_j(ins))*sizeof(BCIns);