Hi Christopher, You mention “People may assume that unannotated pointers are never null; the compiler must not.” just to add, the problem with GCC is that it’s attribute ((nonnull)) is actually used by the optimizer to remove all the NULL checks in the functions. The warnings are a side effect, the main purpose is to optimize and remove all the NULL checks…