bugfix - unsigned underflow