silence Clang warnings about signed comparisons