According to the GCC documentation,[1] __attribute__((malloc)) may not
be used on functions that return memory that contains one or more valid
pointers.

[1] https://gcc.gnu.org/onlinedocs/gcc/Common-Function-Attributes.html