off-by-one in the buffer