Does Infer understand `__attribute__((returns_nonnull))` ? (I think it's a gcc extension, but it could be hidden behind a macro that only expands to that on gcc.)