projects
/
mech_eap.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
beec9c3
)
Reject too short IMSI in EAP-SIM/AKA identity generation
author
Jouni Malinen
<j@w1.fi>
Sun, 22 Jan 2012 19:12:51 +0000
(21:12 +0200)
committer
Jouni Malinen
<j@w1.fi>
Sun, 22 Jan 2012 19:54:24 +0000
(21:54 +0200)
Signed-hostap: Jouni Malinen <j@w1.fi>
src/eap_peer/eap.c
patch
|
blob
|
history
diff --git
a/src/eap_peer/eap.c
b/src/eap_peer/eap.c
index
91fa4a9
..
cac85db
100644
(file)
--- a/
src/eap_peer/eap.c
+++ b/
src/eap_peer/eap.c
@@
-895,6
+895,11
@@
static int eap_sm_imsi_identity(struct eap_sm *sm,
wpa_hexdump_ascii(MSG_DEBUG, "IMSI", (u8 *) imsi, imsi_len);
+ if (imsi_len < 7) {
+ wpa_printf(MSG_WARNING, "Too short IMSI for SIM identity");
+ return -1;
+ }
+
for (i = 0; m && (m[i].vendor != EAP_VENDOR_IETF ||
m[i].method != EAP_TYPE_NONE); i++) {
if (m[i].vendor == EAP_VENDOR_IETF &&