tcp: Overflow bug in Vegas