EllipsoidFactor: fix some out by one errors