I think that may actually be considered buggy, and the actual definition should be

   long add(int x, int y) { return x + y; }

with the caveat of course that `long` is larger than an `int`, which I can't recall if it is valid on all platforms. So mathematical u32 + u32 should be u64, but you can define an `add` function that has strict overflow behavior.