Unverified Commit 0daaa610 authored by Günther Noack's avatar Günther Noack Committed by Mickaël Salaün
Browse files

landlock: Optimize the number of calls to get_access_mask slightly 



This call is now going through a function pointer,
and it is not as obvious any more that it will be inlined.

Signed-off-by: default avatarGünther Noack <gnoack@google.com>
Link: https://lore.kernel.org/r/20231208155121.1943775-4-gnoack@google.com


Fixes: 7a11275c ("landlock: Refactor layer helpers")
Signed-off-by: default avatarMickaël Salaün <mic@digikod.net>
parent b838dd76

security/landlock/ruleset.c

+3 −2
Original line number Diff line number Diff line
@@ -723,11 +723,12 @@ landlock_init_layer_masks(const struct landlock_ruleset *const domain, 
	/* Saves all handled accesses per layer. */

	for (layer_level = 0; layer_level < domain->num_layers; layer_level++) {

		const unsigned long access_req = access_request;

		const access_mask_t access_mask =

			get_access_mask(domain, layer_level);

		unsigned long access_bit;



		for_each_set_bit(access_bit, &access_req, num_access) {

			if (BIT_ULL(access_bit) &

			    get_access_mask(domain, layer_level)) {

			if (BIT_ULL(access_bit) & access_mask) {

				(*layer_masks)[access_bit] |=

					BIT_ULL(layer_level);

				handled_accesses |= BIT_ULL(access_bit);