fix repl rsearch with one-char query

The backward i-search needs to set the "start" parameter of rsearch
to the end (minus 1) of the current search window.
This fixes e.g.:
* searching backwards only one character remains stuck on the same match
* searching backwards 'aaa' skips one of the matches in 'aaaa'
I honestly don't know and I can't test right now. I kind of assumed it was safe before, and I think this patch doesn't make things less safe.