buffer over-read fix in magic_sub

We're over-reading the buffer by 2 bytes here.
I'm not assuming 'buffer' is null terminated. If it is, the call to uwsgi_concat3n will return a buffer that's 1 byte too long but it's safe.