64-bit -1 is more obvious if printed signed than unsigned, so prefer that in
cheritest when reporting a sandbox return value.
Add a (void *) cast required to suppress a warning about alignment in the
C-language memset() when compiled with Clang/LLVM.  This is probably an
upstreamable change.