ensure overflow-safe reading of 16bit Timer1