Annotating pointer arguments with OPUS_RESTRICT and const