[jcifs] incorrect SID with negative integer

[rush]

I am using the event log patch with jcifs. The events that I get show incorrect
SIDs. i.e. S-1-5-21-479040877--574025713-504305617-500 instead of
S-1-5-21-3815926419-3720941583-504305617-500.

I debuggged and found that the double hyphens are a single hyphen with a
negative integer, and there is some problem in calculating the SID for unsigned
integer. Also the event log patch has its own implementation of
encoding/decoding the SID, and it is different from the jcifs implementation in
rpc.java. I am not sure why there are 2 different implementations, and which one
is correct. Has anyone encountered this problem before? And does anyone have a
solution?

Thanks.