From 0a53da7cd8734a233c9c269572cb747814faca88 Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Fri, 12 Jun 2026 16:51:34 +0200
Subject: [PATCH] ita-comp-ima: Handle missing validation URI gracefully

Fixes: ab957aaccefd ("transport IMA file info via PTS Component Evidence Policy URI")
---
 src/libimcv/pts/components/ita/ita_comp_ima.c | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/src/libimcv/pts/components/ita/ita_comp_ima.c b/src/libimcv/pts/components/ita/ita_comp_ima.c
index 9031cda53..abf7c7c1f 100644
--- a/src/libimcv/pts/components/ita/ita_comp_ima.c
+++ b/src/libimcv/pts/components/ita/ita_comp_ima.c
@@ -718,8 +718,13 @@ METHOD(pts_component_t, verify, status_t,
 		pts_meas_algorithms_t hash_algo;
 
 		evidence->get_validation(evidence, &uri);
-		hash_algo = parse_validation_uri(uri, &ima_name, &ima_algo,
-										 algo_buf);
+		if (!uri)
+		{
+			DBG1(DBG_PTS, "ima: evidence is missing validation URI");
+			return FAILED;
+		}
+
+		hash_algo = parse_validation_uri(uri, &ima_name, &ima_algo, algo_buf);
 
 		switch (this->state)
 		{