fix a bug in ArrayBuffer.update