it does a saturating add rather than a normal add.  This ensures the
probability value stays exactly <= 1.  Previously, floating point
rounding error could cause it to be slightly above 1 and would therefore
cause some asserts to misfire during debugging mode.