Add __nonnull__ attributes to functions of ll.h