fixed a buffer overread (OSS-Fuzz)