Check for negative offset, which is possible because of integer overflow