Compiler Attributes: add __alloc_size() for better bounds checking