prevent death by integer overflow