From 83519983138b0e9c19a4beb3a763e2289d5a51cb Mon Sep 17 00:00:00 2001 From: Jouni Malinen Date: Wed, 2 May 2012 20:40:11 +0300 Subject: [PATCH] EAP-AKA' server: Fix identity for MK derivation Incorrect identity string could end up being used with EAP-AKA' when the EAP client is using pseudonym. This code was supposed to use sm->identity just like the EAP-AKA case. Signed-hostap: Jouni Malinen intended-for: hostap-1 --- src/eap_server/eap_server_aka.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/eap_server/eap_server_aka.c b/src/eap_server/eap_server_aka.c index 1dc8dd1f3..54f6ba149 100644 --- a/src/eap_server/eap_server_aka.c +++ b/src/eap_server/eap_server_aka.c @@ -736,7 +736,7 @@ static void eap_aka_determine_identity(struct eap_sm *sm, sm->identity, identity_len); if (data->eap_method == EAP_TYPE_AKA_PRIME) { - eap_aka_prime_derive_keys(identity, identity_len, data->ik, + eap_aka_prime_derive_keys(sm->identity, identity_len, data->ik, data->ck, data->k_encr, data->k_aut, data->k_re, data->msk, data->emsk); } else {