Reject too short IMSI in EAP-SIM/AKA identity generation
Signed-hostap: Jouni Malinen <j@w1.fi>
This commit is contained in:
		
							parent
							
								
									beec9c3a1f
								
							
						
					
					
						commit
						4646ee67c0
					
				
					 1 changed files with 5 additions and 0 deletions
				
			
		|  | @ -895,6 +895,11 @@ static int eap_sm_imsi_identity(struct eap_sm *sm, | ||||||
| 
 | 
 | ||||||
| 	wpa_hexdump_ascii(MSG_DEBUG, "IMSI", (u8 *) imsi, imsi_len); | 	wpa_hexdump_ascii(MSG_DEBUG, "IMSI", (u8 *) imsi, imsi_len); | ||||||
| 
 | 
 | ||||||
|  | 	if (imsi_len < 7) { | ||||||
|  | 		wpa_printf(MSG_WARNING, "Too short IMSI for SIM identity"); | ||||||
|  | 		return -1; | ||||||
|  | 	} | ||||||
|  | 
 | ||||||
| 	for (i = 0; m && (m[i].vendor != EAP_VENDOR_IETF || | 	for (i = 0; m && (m[i].vendor != EAP_VENDOR_IETF || | ||||||
| 			  m[i].method != EAP_TYPE_NONE); i++) { | 			  m[i].method != EAP_TYPE_NONE); i++) { | ||||||
| 		if (m[i].vendor == EAP_VENDOR_IETF && | 		if (m[i].vendor == EAP_VENDOR_IETF && | ||||||
|  |  | ||||||
		Loading…
	
		Reference in a new issue
	
	 Jouni Malinen
						Jouni Malinen