shallow.c: avoid theoretical pointer wrap-around