void *sf_alloc (size_t n /* number of elements */, size_t size /* size of one element */) /*< output-checking allocation >*/ { ... }