That's because at_dword_boundary is signed (I'm a bit confused now, no idea why clang doesn't complain about the upper block of compares in the Read test).