verify: fix potential overflow before widen