> So size_t should be used instead ("s - s1" is unsigned, s >= s1).

That was one of my original thoughts, but the size_t would then creep into all the exponent calculations, requiring fairly substantial changes throughout the code.  That's not something I'd want to consider on the maintenance branches, at least.  I think just limiting the size of the input string is a simpler option.