Assuming the value of max passed in is "sane" (non-negative and within array bounds), it is strictly decreasing and should never overflow.