Couldn't that have been found by turning on the signed-to-unsigned conversion warning?