cipso: unsigned buf_len cannot be negative