EAP-AKA' server: Fix identity for MK derivation

Incorrect identity string could end up being used with EAP-AKA' when
the EAP client is using pseudonym. This code was supposed to use
sm->identity just like the EAP-AKA case.

Signed-hostap: Jouni Malinen <j@w1.fi>
intended-for: hostap-1

diff --git a/src/eap_server/eap_server_aka.c b/src/eap_server/eap_server_aka.c
index 1dc8dd1f3544cc1112c612c4b5d3b61ccfcabd5c..54f6ba14923589f7daab51102ad7c1866484b730 100644 (file)
--- a/src/eap_server/eap_server_aka.c
+++ b/src/eap_server/eap_server_aka.c
@@ -736,7 +736,7 @@ static void eap_aka_determine_identity(struct eap_sm *sm,
                          sm->identity, identity_len);
 
        if (data->eap_method == EAP_TYPE_AKA_PRIME) {
-               eap_aka_prime_derive_keys(identity, identity_len, data->ik,
+               eap_aka_prime_derive_keys(sm->identity, identity_len, data->ik,
                                          data->ck, data->k_encr, data->k_aut,
                                          data->k_re, data->msk, data->emsk);
        } else {