TROVE-2016-12-002: read one byte past end of buffer in get_token()

Grabbing a ticket for this issue. Severity ranked as "low" or "medium", depending on how the analysis goes.