protect retain count against long overflow