Bugs like these can arise from using unsigned values as intermediate results in a computation. Just because the source and dest values are positive integers doesn't mean that results don't go briefly negative.