It's smart enough to check if the buffer is big enough, but
neglected to cast to a 64 bit value so it overflowed.

note that casting to size_t seems the obvious solution here
but that would not fix the overflow for 32 bit architectures.