reserve doesn't need checks, see line 1414. reserve_raw in at_vec also checks for overflow.