Corrected calculation of closure address from bytecode start address.

In 3d52a41015a3267fbc00fd69d15a39f4ae9c2853 the lambda closure header
was modified so the number of local variables and arguments wasn't
stored in the bytecode anymore. During error messages the determination
of the address of the lambda closure structure did some pointer magic
that wasn't adapted accordingly.