Log Message:
fix counting twice the substitution length (caused berval to have wrong length, rejected by subsequent dnNormalize)
The same bug is present in REL_ENG code, but it has no bad effects,
besides being overconservative in checking for buffer overflow :)
The fix is exactly the same.