Performs checked integer subtraction
Note that, unlike most intrinsics, this is safe to call;
it does not require an
Therefore, implementations must not require the user to uphold
any safety invariants.
The stabilized versions of this intrinsic are available on the integer
primitives via the
overflowing_sub method. For example,