Link to my article on handling password strings from the keychain

CK2SSHCredential.m

@@ -91,7 +91,7 @@ - (NSString *)password
                 return nil;
             }
 
-            // Password data must be freed using special keychain APIs. Do so with a specially crafted CFString
+            // Password data must be freed using special keychain APIs. Do so with a specially crafted CFString as described in http://www.mikeabdullah.net/handling-keychain-data-with.html
             CFAllocatorContext context = { 0, NULL, NULL, NULL, NULL, NULL, NULL, freeKeychainContent, NULL };
             CFAllocatorRef allocator = CFAllocatorCreate(NULL, &context);
             _password = CFStringCreateWithBytesNoCopy(NULL, passwordData, passwordLength, kCFStringEncodingUTF8, false, allocator);