From 54dcb380e2e7af1e62c29d57277228890f49cd75 Mon Sep 17 00:00:00 2001 From: Bhaskar Dutta Date: Fri, 20 Jul 2018 17:40:11 +0530 Subject: [PATCH] Fixed the EAP security issue Description : 1. App send anonymous identity and connect with EAP network. And connman store it inside corresponding network pointer. 2. Then if user disconnect that connection,forgetAP will be called. And connman does not clear last anonymous identity data for that service. 3. Next time when user again connect with same EAP network, but without anonymous identity. Then previous anonymous identity will be passwed to WPA suplicant. But blank anonymous identity should be treated. Change-Id: I267bea4d394390e82351ae997229c69785ea6d6d Signed-off-by: Bhaskar Dutta --- src/service.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/service.c b/src/service.c index d157ec2..d7a7039 100755 --- a/src/service.c +++ b/src/service.c @@ -5663,6 +5663,7 @@ static void __connman_service_cleanup_network_8021x(struct connman_service *serv connman_network_set_string(service->network, "WiFi.PrivateKeyFile", NULL); connman_network_set_string(service->network, "WiFi.PrivateKeyPassphrase", NULL); connman_network_set_string(service->network, "WiFi.Phase2", NULL); + connman_network_set_string(service->network, "WiFi.AnonymousIdentity", NULL); } #endif -- 2.7.4