Fixed: make sure float won't happen if hmac check failed (regression)