[lysium]

Why is length stored with a signed integer in the first place?

[tptacek]

It's (mis)using off_t, which allows for negative offsets (for obvious reasons). You also don't need signed integers to have integer overflows.