rerere: avoid buffer overrun