On 09/11/2014 01:46 AM, Qiaowei Ren wrote: > + * This function will be called by do_munmap(), and the VMAs covering > + * the virtual address region start...end have already been split if > + * necessary and remvoed from the VMA list. "remvoed" -> "removed" > +void mpx_unmap(struct mm_struct *mm, > + unsigned long start, unsigned long end) > +{ > + int ret; > + > + ret = mpx_try_unmap(mm, start, end); > + if (ret == -EINVAL) > + force_sig(SIGSEGV, current); > +} In the case of a fault during an unmap, this just ignores the situation and returns silently. Where is the code to retry the freeing operation outside of mmap_sem? -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@xxxxxxxxx. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: <a href=mailto:"dont@xxxxxxxxx"> email@xxxxxxxxx </a>