Flexelint complains that this truncation is suspicious, which is fair.
The pdiff() function allows for a more expressive, and hopefully less
suspicious alternative with a bit of hardening in the process.