since size_t is unsigned, testing iov_len < 0 is futile