pmpdec: make i unsigned, avoid undefined behavior of i++