It doesn't have to prove absence of overflow since that is undefined behavior in C and thus modern compilers assume it can never happen.