user.c: fixed over 4GB address