Avoid unsigned integer underflow
(cherry picked from commit 71faaaaf1695d944598c73319b2c9f89101e9c93)