off by one SIPUSH error (not a bug)