[bobmcnamara]

The compiler is allowed to assume the results of malloc and certain other allocation functions do not alias.

Restrict does too.