/*@out@*/ and failure returns

[Simon Hosie]

I'm sure I asked this already, but I don't appear to have done so, so I'll ask now.

What's the proper way of handling a function that has outs, but may fail (with an 
error return code) and not define some or all of them?