off_t is signed per POSIX definition