finish env_run, fix a bug: uint32_t len >= 0 ?? Always