Fix counter bug

The timer counts from 0 to CCR0 (inclusive), not from 0 to CCR0-1 as
someone accustomed to C arrays might expect.