> prevent overflow type attacks by using signed integers instead of size_t, and then checking whether the result is negative after arithmetic

Whoa!

As if checking for overflow with unsigned is impossible...