[PATCH 4/4] flow: Fix clang error (clang-analyzer-security.PointerSub)