NULL is OK, both for passing and for returning.
The callback is valid until first called.
The callback is valid only during the call to the method.
The caller owns the data, and is responsible for free it.
The data is owned by the callee, which is responsible of freeing it.