Fixed integer overflow in HeapOffsetMap