core/flat: Fix bug in `FlatBuffer::substring`