Fix off-by-one error in bounds check