From: Eugene Syromiatnikov Date: Mon, 27 Oct 2025 09:17:57 +0000 (+0100) Subject: doc/man3/X509_STORE_get0_param.pod: mention how to free the returned objects X-Git-Tag: 3.6-PRE-CLANG-FORMAT-WEBKIT~69 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e3608d80dfa74ec4b26d3802603549072a929f1c;p=thirdparty%2Fopenssl.git doc/man3/X509_STORE_get0_param.pod: mention how to free the returned objects It is not entirely obvious from the description how the objects returned by X509_STORE_get1_objects() and X509_STORE_get1_all_certs() are supposed to be freed, explicitly mention the relevant calls, and provide a reference to DEFINE_STACK_OF(3). Signed-off-by: Eugene Syromiatnikov Reviewed-by: Saša Nedvědický Reviewed-by: Todd Short (Merged from https://github.com/openssl/openssl/pull/29002) (cherry picked from commit de1abbed1cd75fcb8a6becadbc2854aa124f9bcf) --- diff --git a/doc/man3/X509_STORE_get0_param.pod b/doc/man3/X509_STORE_get0_param.pod index 95a1725bc38..794b149e661 100644 --- a/doc/man3/X509_STORE_get0_param.pod +++ b/doc/man3/X509_STORE_get0_param.pod @@ -25,8 +25,9 @@ parameters for I. The returned pointer must not be freed by the calling application X509_STORE_get1_objects() returns a snapshot of all objects in the store's X509 -cache. The cache contains B and B objects. The caller is -responsible for freeing the returned list. +cache. The cache contains B and B objects. The caller +is responsible for freeing the returned list, +using sk_X509_OBJECT_pop_free(sk, X509_OBJECT_free). X509_STORE_get0_objects() retrieves an internal pointer to the store's X509 object cache. The cache contains B and B objects. The @@ -35,7 +36,8 @@ shared across multiple threads, it is not safe to use the result of this function. Use X509_STORE_get1_objects() instead, which avoids this problem. X509_STORE_get1_all_certs() returns a list of all certificates in the store. -The caller is responsible for freeing the returned list. +The caller is responsible for freeing the returned list +with OSSL_STACK_OF_X509_free(). =head1 RETURN VALUES @@ -54,6 +56,7 @@ certificates on success, else NULL. =head1 SEE ALSO +L, L =head1 HISTORY