]> git.ipfire.org Git - thirdparty/openssl.git/commitdiff
doc/man3/X509_STORE_get0_param.pod: mention how to free the returned objects
authorEugene Syromiatnikov <esyr@openssl.org>
Mon, 27 Oct 2025 09:17:57 +0000 (10:17 +0100)
committerTomas Mraz <tomas@openssl.org>
Mon, 24 Nov 2025 18:16:07 +0000 (19:16 +0100)
It is not entirely obvious from the description how the objects returned
by X509_STORE_get1_all_certs() are supposed to be freed, explicitly mention
the relevant call, and provide a reference to DEFINE_STACK_OF(3).

Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Norbert Pocs <norbertp@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/29017)

doc/man3/X509_STORE_get0_param.pod

index d9413fd49e15fcca63f0008e98e1a1aea471d782..02585de140f40283947415e79ce470974b1a2f9e 100644 (file)
@@ -29,7 +29,8 @@ X509 object cache. The cache contains B<X509> and B<X509_CRL> objects. The
 returned pointer must not be freed by the calling application.
 
 X509_STORE_get1_all_certs() returns a list of all certificates in the store.
-The caller is responsible for freeing the returned list.
+The caller is responsible for freeing the returned list
+with sk_X509_pop_free(sk, X509_free).
 
 =head1 RETURN VALUES
 
@@ -45,6 +46,7 @@ certificates on success, else NULL.
 
 =head1 SEE ALSO
 
+L<DEFINE_STACK_OF(3)>,
 L<X509_STORE_new(3)>
 
 =head1 HISTORY