The aggregation arithmetic operations are specified to wrap, but they are implemented in terms of signed integral types. The unit tests for these operations are written such that expected values are formed by forcing signed integral values to overflow, expecting that they wrap, which is undefined behavior.