On 09/11/2014 01:46 AM, Qiaowei Ren wrote: > +/* > + * When a BNDSTX instruction attempts to save bounds to a BD entry > + * with the lack of the valid bit being set, a #BR is generated. > + * This is an indication that no BT exists for this entry. In this > + * case the fault handler will allocate a new BT. > + * > + * With 32-bit mode, the size of BD is 4MB, and the size of each > + * bound table is 16KB. With 64-bit mode, the size of BD is 2GB, > + * and the size of each bound table is 4MB. > + */ > +int do_mpx_bt_fault(struct xsave_struct *xsave_buf) > +{ > + unsigned long status; > + unsigned long bd_entry, bd_base; > + > + bd_base = xsave_buf->bndcsr.cfg_reg_u & MPX_BNDCFG_ADDR_MASK; > + status = xsave_buf->bndcsr.status_reg; > + > + bd_entry = status & MPX_BNDSTA_ADDR_MASK; > + if ((bd_entry < bd_base) || > + (bd_entry >= bd_base + MPX_BD_SIZE_BYTES)) > + return -EINVAL; > + > + return allocate_bt((long __user *)bd_entry); > +} This needs a comment about how we got the address of the bd_entry. Essentially just note that the hardware tells us where the missing/bad entry is. Would there be any value in ensuring that a VMA is present at bd_entry? -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@xxxxxxxxx. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: <a href=mailto:"dont@xxxxxxxxx"> email@xxxxxxxxx </a>