fix #34: off-by-one error in secureStrcmp()