Changes in kernel/generic/src/security/perm.c [5a5269d:07d4271] in mainline

File:

• kernel/generic/src/security/perm.c (modified) (3 diffs)

kernel/generic/src/security/perm.c

@@ -89 +89 @@
                 return EPERM;
 
-        irq_spinlock_lock(&tasks_lock, true);
         task_t *task = task_find_by_id(taskid);
-
-        if ((!task) || (!container_check(CONTAINER, task->container))) {
-                irq_spinlock_unlock(&tasks_lock, true);
+        if (!task)
                 return ENOENT;
+
+        errno_t rc = ENOENT;
+
+        irq_spinlock_lock(&task->lock, true);
+        if (container_check(CONTAINER, task->container)) {
+                task->perms |= perms;
+                rc = EOK;
         }
-
-        irq_spinlock_lock(&task->lock, false);
-        task->perms |= perms;
-        irq_spinlock_unlock(&task->lock, false);
-
-        irq_spinlock_unlock(&tasks_lock, true);
-        return EOK;
+        irq_spinlock_unlock(&task->lock, true);
+
+        task_release(task);
+        return rc;
 }
 
@@ -118 +119 @@
 static errno_t perm_revoke(task_id_t taskid, perm_t perms)
 {
-        irq_spinlock_lock(&tasks_lock, true);
-
         task_t *task = task_find_by_id(taskid);
-        if ((!task) || (!container_check(CONTAINER, task->container))) {
-                irq_spinlock_unlock(&tasks_lock, true);
+        if (!task)
                 return ENOENT;
-        }
 
         /*
@@ -131 +128 @@
          * doesn't have PERM_PERM.
          */
-        irq_spinlock_lock(&TASK->lock, false);
-
-        if ((!(TASK->perms & PERM_PERM)) || (task != TASK)) {
-                irq_spinlock_unlock(&TASK->lock, false);
-                irq_spinlock_unlock(&tasks_lock, true);
+        if (task != TASK && !(perm_get(TASK) & PERM_PERM)) {
+                task_release(task);
                 return EPERM;
         }
 
-        task->perms &= ~perms;
-        irq_spinlock_unlock(&TASK->lock, false);
-
-        irq_spinlock_unlock(&tasks_lock, true);
-        return EOK;
+        errno_t rc = ENOENT;
+
+        irq_spinlock_lock(&task->lock, true);
+        if (container_check(CONTAINER, task->container)) {
+                task->perms &= ~perms;
+                rc = EOK;
+        }
+        irq_spinlock_unlock(&task->lock, true);
+
+        task_release(task);
+        return rc;
 }