s3: smbd: Locking, fix off-by one calculation in brl_pending_overlap().