Fixed bug in AddressMap::changeAccess

The modification was not limited to addresses that fall only
within the size limit.  I.e.,

	map.at(start).limit(size).changeAccess(...)

applied to the end of the final satisfying segment.