bugfix: cfread used wrong buffer offset