ead: fix array overrun