CVE-2017-15670: glob: Fix one-byte overflow [BZ #22320]