[kryptiskt]

It doesn't have to prove absence of overflow since that is undefined behavior in C and thus modern compilers assume it can never happen.

[hathawsh]

Great point.