checking to live happily with recent gcc optimizations that
assume signed integer arithmetic never overflows.