toketin reported that it doesn't happen with latest git version anymore.
Please try the attached patch. It will create a file /tmp/pekwm.bug.log when a window with negative offset/size is created. If it happens that windows are created outside, please post the last two or three lines of /tmp/pekwm.bug.log (in case the file got created). Thanks!