> I think the reason @tarruda added it, is because if new_len > old_len, then old_len - new_len wraps around and becomes huge, therefore making the loop run for a very long time and possibly exploding the universe.

:+1: . Though the loop wouldn't run for a very long time because `ml_delete` would probably fail.

> This is one of the reasons I advocate using signed types of possible. Of course, size semantics are appropriate here, so the alternative solution is to be paranoid

:+1:

> This, in my opinion, just reads faster.

Will fix in the next PR