Lőrinc b8fa6f0f70 util: introduce TrySub to prevent unsigned underflow ...

Introduce `TrySub(T&, U)` which subtracts an unsigned integral `U` from an unsigned integral `T`, returning `false` on underflow.
Use with `Assume(TrySub(...))` at coins cache accounting decrement sites so invariant violations fail immediately rather than silently wrapping.

Co-authored-by: MarcoFalke <*~=`'#}+{/-|&$^_@721217.xyz>
Co-authored-by: Pieter Wuille <pieter@wuille.net>

2026-02-23 15:56:25 +01:00

17 KiB

Raw Blame History

View Raw