If the CFLAGS passed to tor don't contain -ftrapv (or the undefined behaviour sanitiser), let's build with -ftrapv. This resolves legacy/trac#13538 non-intrusively, and prevents an entire class of integer safety bugs. (That said, wrapping can hide some issues rather than resolving them.)