fix off-by-one buffer overflows