Avoid overflowing a signed integer which triggers undefined behaviour.