Figure out the mechanism to emit bounds to parameters of function pointers.

[Machiry]

Consider the following code:

void fun(_Array_ptr<char> a : count(len), unsigned int len)
{ 
    a[len-1] = 0;
} 
  
int main() 
{ 
    // fun_ptr is a pointer to function fun()  
    _Ptr<void (_Array_ptr<char> , unsigned int )> fun_ptr =  &fun;
    (*fun_ptr)(0, 0);
    return 0; 
}

How to emit the bounds to the parameters of the function pointer fun_ptr?