We originally checked for failure by checking if the returned code
was non-zero.  Strictly, it should be a negative value.