You cannot check an unsigned size_t variable for underflow, so I changed the code to first check if an underflow would occur before performing the subtraction. Fixes #489.
The warnings are shown if components using the genode base are compiled with -Wextra -Wall enabled. Fixes #489.