tree 1cf168299614c14edff81bff1b8a2cc94fc51cc9
parent c8d4803a3c656e8e3eaf233ac02243a39cd311c6
author Hai Shalom <haishalom@google.com> 1615516930 -0800
committer Hai Shalom <haishalom@google.com> 1616256624 -0700

EAP-SIM/AKA: Fix check for anonymous decorated identity

eap_sim_anonymous_username() gets called with an argument that is not a
null terminated C string and as such, os_strrchr() and os_strlen()
cannot be used with it. The previous implementation resulted in use of
uninitialized values and a potential read beyond the end of the buffer.

Credit to OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32277
Fixes: 73d9891bd722 ("EAP-SIM/AKA peer: Support decorated anonymous identity prefix")
Signed-off-by: Jouni Malinen <j@w1.fi>

Bug: 182510351
Test: compiles, unit test
Change-Id: I41364c8c550f1c6ab853c3d74cfda1c5f628feb0