A nice catch by Ulrich. There may a similar problem in inleap, which uses a similar "cheap overflow check" (i.e., a check that looks for 64-bit overflow where perhaps a 32-bit overflow check was desired).