pub extern "rust-intrinsic" fn saturating_sub<T: Copy>(a: T, b: T) -> T
a - b, saturating at numeric bounds.
Note that, unlike most intrinsics, this is safe to call;
it does not require an
Therefore, implementations must not require the user to uphold
any safety invariants.
The stabilized versions of this intrinsic are available on the integer
primitives via the
saturating_sub method. For example,