more TDB

source/libs/tdb/src/db/tdbBtree.c

@@ -794,8 +794,8 @@ static int tdbBtreeDecodePayload(SPage *pPage, const u8 *pPayload, SCellDecoder
   if (nPayload <= pPage->maxLocal) {
     // General case without overflow
     pDecoder->pKey = (void *)pPayload;
-    if (pDecoder->pVal) {
-      pDecoder->pVal = (void *)(pPayload + pDecoder->vLen);
+    if (!pDecoder->pVal) {
+      pDecoder->pVal = (void *)(pPayload + pDecoder->kLen);
     }
   }
 

source/libs/tdb/src/db/tdbPage.c

@@ -137,7 +137,7 @@ int tdbPageInsertCell(SPage *pPage, int idx, SCell *pCell, int szCell) {
     }
 
     memcpy(pTarget, pCell, szCell);
-    pTmp = pPage->pCellIdx + idx + pPage->szOffset;
+    pTmp = pPage->pCellIdx + idx * pPage->szOffset;
     memmove(pTmp, pTmp + pPage->szOffset, pPage->pFreeStart - pTmp - pPage->szOffset);
     TDB_PAGE_CELL_OFFSET_AT_SET(pPage, idx, pTarget - pPage->pData);
     TDB_PAGE_NCELLS_SET(pPage, TDB_PAGE_NCELLS(pPage) + 1);