fix memory safety hole around `borrow`

2 files changed, 18 insertions, 25 deletions

diff --git a/tests/cfail/borrow.rs b/tests/cfail/borrow.rs
index fc8638f..6d8ab2a 100644
--- a/tests/cfail/borrow.rs
+++ b/tests/cfail/borrow.rs
@@ -1,22 +1,31 @@
 extern crate cortex_m_srp;
 
-use cortex_m_srp::{C2, C3, C4, P1, Resource};
+use cortex_m_srp::{C1, C2, C3, C4, C5, P2, Resource};
 
-static R1: Resource<i32, C3> = Resource::new(0);
-static R2: Resource<i32, C2> = Resource::new(0);
-static R3: Resource<i32, C3> = Resource::new(0);
-static R4: Resource<i32, C4> = Resource::new(0);
+static R1: Resource<i32, C4> = Resource::new(0);
+static R2: Resource<i32, C3> = Resource::new(0);
+static R3: Resource<i32, C4> = Resource::new(0);
+static R4: Resource<i32, C5> = Resource::new(0);
+static R5: Resource<i32, C1> = Resource::new(0);
+static R6: Resource<i32, C2> = Resource::new(0);
 
-fn j1(prio: P1) {
+fn j1(prio: P2) {
     R1.lock(&prio, |r1, c3| {
         // CAN borrow a resource with ceiling C when the system ceiling SC > C
-        let r2 = R2.borrow(&c3);
+        let r2 = R2.borrow(&prio, &c3);
 
         // CAN borrow a resource with ceiling C when the system ceiling SC == C
-        let r3 = R3.borrow(&c3);
+        let r3 = R3.borrow(&prio, &c3);
 
         // CAN'T borrow a resource with ceiling C when the system ceiling SC < C
-        let r4 = R4.borrow(&c3);
+        let r4 = R4.borrow(&prio, &c3);
         //~^ error
+
+        // CAN'T borrow a resource with ceiling C < P (task priority)
+        let r5 = R5.borrow(&prio, &c3);
+        //~^ error
+
+        // CAN borrow a resource with ceiling C == P (task priority)
+        let r6 = R6.borrow(&prio, &c3);
     });
 }
diff --git a/tests/cfail/lock_mut.rs b/tests/cfail/lock_mut.rs
deleted file mode 100644
index b5e1ae9..0000000
--- a/tests/cfail/lock_mut.rs
+++ /dev/null
@@ -1,16 +0,0 @@
-extern crate cortex_m_srp;
-
-use cortex_m_srp::{C3, C4, P2, Resource};
-
-static R1: Resource<i32, C4> = Resource::new(0);
-static R2: Resource<i32, C3> = Resource::new(0);
-
-fn j1(mut prio: P2) {
-    R1.lock_mut(
-        &mut prio, |r1: &mut i32, c3| {
-            let r2 = R2.borrow(&c3);
-            let another_r1: &i32 = R1.borrow(&c3);
-            //~^ error
-        }
-    );
-}