fix decode invalid write to out when hash has padding