TextSearch(): fixed bufer overrun