diff --git a/ChangeLog b/ChangeLog
index c663cc4ded..511842b0e2 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+Thu Jul 17 01:27:38 2008  Yusuke Endoh  <mame@tsg.ne.jp>
+
+	* io.c (appendline): remove invalid access.
+
 Wed Jul 16 18:04:34 2008  Nobuyoshi Nakada  <nobu@ruby-lang.org>
 
 	* signal.c (signal_exec, trap_handler): trap accepts a string as
diff --git a/io.c b/io.c
index f7898b61d4..9fa241f6c3 100644
--- a/io.c
+++ b/io.c
@@ -1762,7 +1762,7 @@ appendline(rb_io_t *fptr, int delim, VALUE *strp, long *lp)
 	    }
 	    if (limit > 0 && limit == pending) {
 		char *p = fptr->rbuf+fptr->rbuf_off;
-		char *pp = p + limit;
+		char *pp = p + limit - 1;
 		char *pl = rb_enc_left_char_head(p, pp, enc);
 
 		if (pl < pp) {