NULL is OK, both for passing and for returning.
NULL may be passed as the value in, out, in-out; or as a return value.
Free data after the code is done.
Don't free data after the code is done.