bug fixed: stack pointer add, sub