the GEP faq says that only inbounds geps are guaranteed to not overflow.