Kernel: Add verification promise violations are propagated properly

This change adds a thread member variable to track if we have a pending
promise violation on a kernel thread. This ensures that all code
properly propagates promise violations up to the syscall handler.

Suggested-by: Andreas Kling <kling@serenityos.org>

1 files changed, 2 insertions, 0 deletions

diff --git a/Kernel/Process.cpp b/Kernel/Process.cpp
index 8496b68a08..3e9c70af93 100644
--- a/Kernel/Process.cpp
+++ b/Kernel/Process.cpp
@@ -868,6 +868,7 @@ ErrorOr<void> Process::require_no_promises() const
     if (!has_promises())
         return {};
     dbgln("Has made a promise");
+    Thread::current()->set_promise_violation_pending(true);
     return EPROMISEVIOLATION;
 }
 
@@ -880,6 +881,7 @@ ErrorOr<void> Process::require_promise(Pledge promise)
         return {};
 
     dbgln("Has not pledged {}", to_string(promise));
+    Thread::current()->set_promise_violation_pending(true);
     (void)try_set_coredump_property("pledge_violation"sv, to_string(promise));
     return EPROMISEVIOLATION;
 }