#### Manually checked properties * [ ] No stringification macros * [ ] Output-parameter pointers in functions are on the left * [ ] Negative return values on failure of API functions (within restrictions of FO transform). * [ ] `const` arguments are labeled as `const` * [ ] variable declarations at the beginning (except in `for (size_t i=...`) * Optional: * [ ] All integer types are of fixed size, using `stdint.h` types (including `uint8_t` instead of `unsigned char`) * [ ] Integers used for indexing are of size `size_t`