Other option is using unsigned integers. In this case additional checks could be removed. The check in the while condition would be enough.

@serhiy-storchaka If it's OK to change types of several variables in affected functions (because if only ofs is changed, we'd need to add casts all over the place to avoid signed/unsigned comparison warnings), I'll update the patch.

Added @tim-one, the author of this code.