The length field of an NSConcreteData lives one word past the start of the object, not two. llvm-svn: 325841