PVS model: fix off by one error

this cute little guy did not appear in valgrind or ASAN but was caught
by libstdc++'s debug mode.