sig val written_formals : Cil_types.kernel_function -> Cil_datatype.Varinfo.Set.t val safe_argument : Cil_types.exp -> bool end