crypto: nx - off by one bug in nx_of_update_msc()