Add overflow checks so we I_Error instead of death crash into oblivion

You'd love to know how we even reached (size_t)-1.