NULL is OK, both for passing and for returning.
The caller owns the data, and is responsible for free it.
The data is owned by the callee, which is responsible of freeing it.
