fix buffer overrun in unpack()