This would cause underflow panics before, but should now
generate proper errors at runtime or compile-time.