Unsigned integer underflow and overflow are both guaranteed to wrap by the C standard.