iwl3945-base.c: fix off-by-one errors