Fix buffer overrun in elastic tabstops