fix: avoid int overflow in rlimit.c