It's gross, but I'm pretty sure the plain form of `attribute((malloc))` is independent from the deallocator forms.
Ah, on rereading I believe you're right—the relevant wording being "Independently, the form of the attribute with one or two arguments..."