Fix compilation under recent clang

`restrict` is now a keyword.