BUGFIX: corrected off-by-one in toString(16)