privsep: Avoid undefined behavior in pointer arithmetic