Fixed a bug in ci address shifting; fix #3423

Dinko Galetic and Denis Kasak reported the issue and the fix.
(via https://hackerone.com/dgaletic).

1 files changed, 2 insertions, 1 deletions

diff --git a/src/vm.c b/src/vm.c
index 0c0f5a4bb..c174c0b43 100644
--- a/src/vm.c
+++ b/src/vm.c
@@ -1705,9 +1705,10 @@ RETRY_TRY_BLOCK:
           mrb->jmp = prev_jmp;
           return v;
         }
-        cipop(mrb);
+        ci = mrb->c->ci;
         acc = ci->acc;
         mrb->c->stack = ci->stackent;
+        cipop(mrb);
         if (acc == CI_ACC_SKIP) {
           mrb->jmp = prev_jmp;
           return v;