fib: fix off-by-one error in rewrite length check