Process crash via unwrapped %g formatter index

Stack-buffer overflow in LuaJIT through 2.1 and OpenResty luajit2 before 2.1-20240626 allows attackers to crash an embedding process. In lj_strfmt_wfnum, the %g trailing-zero loop increments the 64-slot nd ring index without wrapping it, then reads nd[64] while formatting crafted numeric data. Attackers must cause an embedding application to format attacker-influenced data; the proof demonstrates an out-of-bounds read and service interruption, while data disclosure is reported but not demonstrated.