Fix an off-by-one in overshoot detection.

This duplicates a fix I needed to make in the Flambe runtime that I
haven't actually tested here in the AS3 runtime, but am pretty sure also
applies.