fix possible buffer underrun by 1