Test replaceBytesInRange:withBytes:length overlap case