Fix a off-by-one that will cause obfs3 handshakes to fail once in a blue moon.

The obfs3 spec says to drop the connection if more than MAX_PADDING bytes is scanned, but per asn and the python code, the spec is wrong here.