diff --git a/lib/prototypes.h b/lib/prototypes.h
index 3856d7f8..61a9db5e 100644
--- a/lib/prototypes.h
+++ b/lib/prototypes.h
@@ -433,8 +433,9 @@ extern void spw_free (/*@out@*/ /*@only@*/struct spwd *spent);
 extern int shell (const char *file, /*@null@*/const char *arg, char *const envp[]);
 
 /* spawn.c */
-extern int run_command (const char *cmd, const char *argv[],
-                        /*@null@*/const char *envp[], /*@out@*/int *status);
+ATTR_ACCESS(write_only, 4)
+extern int run_command(const char *cmd, const char *argv[],
+                       /*@null@*/const char *envp[], int *status);
 
 /* strtoday.c */
 extern long strtoday (const char *);
diff --git a/lib/spawn.c b/lib/spawn.c
index ce1a97db..2f930ca0 100644
--- a/lib/spawn.c
+++ b/lib/spawn.c
@@ -17,8 +17,9 @@
 
 #include "shadowlog_internal.h"
 
-int run_command (const char *cmd, const char *argv[],
-                 /*@null@*/const char *envp[], /*@out@*/int *status)
+int
+run_command(const char *cmd, const char *argv[],
+            /*@null@*/const char *envp[], int *status)
 {
 	pid_t pid, wpid;