From d20365db17373c7dc989ab9539fa752034779ed8 Mon Sep 17 00:00:00 2001 From: Hai Shalom Date: Fri, 27 Dec 2019 09:44:49 -0800 Subject: [PATCH] EAP-SIM/AKA peer: Add support for EAP Method prefix Add support for EAP method prefix in the anonymous identity used during EAP-SIM/AKA/AKA' authentication when encrypted IMSI is used. The prefix is a single character that indicates which EAP method is required by the client. Signed-off-by: Hai Shalom --- src/eap_common/eap_sim_common.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/eap_common/eap_sim_common.c b/src/eap_common/eap_sim_common.c index 1e0f80879..4a9324406 100644 --- a/src/eap_common/eap_sim_common.c +++ b/src/eap_common/eap_sim_common.c @@ -1219,6 +1219,10 @@ int eap_sim_anonymous_username(const u8 *id, size_t id_len) os_memcmp(id, anonymous_id_prefix, anonymous_id_len) == 0) return 1; /* 'anonymous@realm' */ + if (id_len > anonymous_id_len + 1 && + os_memcmp(id + 1, anonymous_id_prefix, anonymous_id_len) == 0) + return 1; /* 'Xanonymous@realm' where X is an EAP method code */ + if (id_len > 1 && id[0] == '@') return 1; /* '@realm' */