Fix buffer overun in tokenise