Allocate data returned by pkcs7_t.get_attribute()

[strongswan.git] / src / libstrongswan / credentials / containers / pkcs7.h

diff --git a/src/libstrongswan/credentials/containers/pkcs7.h b/src/libstrongswan/credentials/containers/pkcs7.h
index d79650e..d42d82b 100644 (file)
--- a/src/libstrongswan/credentials/containers/pkcs7.h
+++ b/src/libstrongswan/credentials/containers/pkcs7.h
@@ -41,9 +41,12 @@ struct pkcs7_t {
         * To select the signerInfo structure to get the attribute from, pass
         * the enumerator position from container_t.create_signature_enumerator().
         *
+        * The attribute returned does not contain type information and must be
+        * freed after use.
+        *
         * @param oid                   OID from the attribute to get
         * @param enumerator    enumerator to select signerInfo
-        * @param value                 chunk receiving attribute value, internal data
+        * @param value                 chunk receiving attribute value, allocated
         * @return                              TRUE if attribute found
         */
        bool (*get_attribute)(pkcs7_t *this, int oid, enumerator_t *enumerator,