Fix bug: read length with unsigned byte