mul_nonnegative_saturating

Function mul_nonnegative_saturating 

pub fn mul_nonnegative_saturating(x: i64, y: i64) -> i64