we gave wrong content-length in range requests. r->stop - r->start is wrong because r->stop is the byte offset of the *last* byte, not the *next* byte after the last.