Fix ALLOC_GROW off-by-one