[tor-commits] [tor/maint-0.3.1] dos: Make sure cc_stats_refill_bucket can't overflow while calculating