base64: fix off-by-one buffer size bug