Fix a compilation error with some compilers: attribute
requires two parenthesis for its argument, but instead of using
attribute directly, use the appropriate __nonnull macro
from cdefs.h.