fix: nil pointer dereference during evidence conversion

Signed-off-by: nscuro <[email protected]>
CycloneDX · Sep 14, 2024 · 6f0e0cf · 6f0e0cf
1 parent 6f53207
commit 6f0e0cf
Showing 1 changed file with 9 additions and 7 deletions.
diff --git a/convert.go b/convert.go
@@ -195,13 +195,15 @@ func convertEvidence(c *Component, specVersion SpecVersion) {
 	}
 
 	if specVersion < SpecVersion1_6 {
-		for i := range *c.Evidence.Occurrences {
-			occ := &(*c.Evidence.Occurrences)[i]
-
-			occ.Line = nil
-			occ.Offset = nil
-			occ.Symbol = ""
-			occ.AdditionalContext = ""
+		if c.Evidence.Occurrences != nil {
+			for i := range *c.Evidence.Occurrences {
+				occ := &(*c.Evidence.Occurrences)[i]
+
+				occ.Line = nil
+				occ.Offset = nil
+				occ.Symbol = ""
+				occ.AdditionalContext = ""
+			}
 		}
 	}