... or whoever wrote the code should have put boundary checks in to make sure a negative altitude was caught and handled properly