Check for lengths being <= 0. Note that this interface can only
be accessed by root. It uses unsigned ints instead of size_t
to preserve the ABI.

PR: 207627
Submitted by: ryan@ryanday.net (with slight tweaks)
MFC after: 1 month