don't return pointers for InnerHashes
off by one error
convenience function
fix one off err, and protect against untrusted data
tested and fixed