Parcourir la source

EAP-AKA' server: Fix identity for MK derivation

Incorrect identity string could end up being used with EAP-AKA' when
the EAP client is using pseudonym. This code was supposed to use
sm->identity just like the EAP-AKA case.

Signed-hostap: Jouni Malinen <j@w1.fi>
intended-for: hostap-1
Jouni Malinen il y a 13 ans
Parent
commit
8351998313
1 fichiers modifiés avec 1 ajouts et 1 suppressions
  1. 1 1
      src/eap_server/eap_server_aka.c

+ 1 - 1
src/eap_server/eap_server_aka.c

@@ -736,7 +736,7 @@ static void eap_aka_determine_identity(struct eap_sm *sm,
 			  sm->identity, identity_len);
 
 	if (data->eap_method == EAP_TYPE_AKA_PRIME) {
-		eap_aka_prime_derive_keys(identity, identity_len, data->ik,
+		eap_aka_prime_derive_keys(sm->identity, identity_len, data->ik,
 					  data->ck, data->k_encr, data->k_aut,
 					  data->k_re, data->msk, data->emsk);
 	} else {