[bugfix] invalid use of oob_length