Tighten already-tospace test; add a sanity check.

While this won't catch *all* cases of out of date pointers, it will
cause a panic if we see a pointer that should be in fromspace, but is
actually into tospace (which was a fromspace in the past) and is ahead
of the bit of tospace we've copied into so far.