Prefer unsigned int or size_t when len is never < 0.