Fixed the EAP security issue 23/184723/2
authorBhaskar Dutta <bhaskar.d@samsung.com>
Fri, 20 Jul 2018 12:10:11 +0000 (17:40 +0530)
committerManeesh Jain <maneesh.jain@samsung.com>
Fri, 27 Jul 2018 03:53:03 +0000 (03:53 +0000)
Description :
1. App send anonymous identity and connect with EAP network.
   And connman store it inside corresponding network pointer.
2. Then if user disconnect that connection,forgetAP will be called.
   And connman does not clear last anonymous identity data for that service.
3. Next time when user again connect with same EAP network, but without anonymous identity.
   Then previous anonymous identity will be passwed to WPA suplicant. But blank anonymous identity should be treated.

Change-Id: I267bea4d394390e82351ae997229c69785ea6d6d
Signed-off-by: Bhaskar Dutta <bhaskar.d@samsung.com>
src/service.c

index d157ec2..d7a7039 100755 (executable)
@@ -5663,6 +5663,7 @@ static void __connman_service_cleanup_network_8021x(struct connman_service *serv
        connman_network_set_string(service->network, "WiFi.PrivateKeyFile", NULL);
        connman_network_set_string(service->network, "WiFi.PrivateKeyPassphrase", NULL);
        connman_network_set_string(service->network, "WiFi.Phase2", NULL);
+       connman_network_set_string(service->network, "WiFi.AnonymousIdentity", NULL);
 }
 #endif