EAP-FAST peer: Fix error path handling for Session-Id

It was possible to hit a NULL pointer dereference if Session-Id
derivation failed due to a memory allocation failure.

Signed-off-by: Jouni Malinen <j@w1.fi>

diff --git a/src/eap_peer/eap_fast.c b/src/eap_peer/eap_fast.c
index 833dcb6baa00f99585e1b6c0e081685b3594a404..6e8b12fd651130fc2931c5009ba8417e70e41b78 100644 (file)
--- a/src/eap_peer/eap_fast.c
+++ b/src/eap_peer/eap_fast.c
@@ -1721,7 +1721,7 @@ static u8 * eap_fast_get_session_id(struct eap_sm *sm, void *priv, size_t *len)
        struct eap_fast_data *data = priv;
        u8 *id;
 
-       if (!data->success)
+       if (!data->success || !data->session_id)
                return NULL;
 
        id = os_malloc(data->id_len);