1 files changed, 16 insertions, 9 deletions

diff --git a/mm/mmap.c b/mm/mmap.c
index ad6e4eaf34f8..a32d28ce31cd 100644
--- a/mm/mmap.c
+++ b/mm/mmap.c
@@ -2165,24 +2165,31 @@ int may_expand_vm(struct mm_struct *mm, unsigned long npages)
 }
 
 
-static struct page *special_mapping_nopage(struct vm_area_struct *vma,
-                                           unsigned long address, int *type)
+static int special_mapping_fault(struct vm_area_struct *vma,
+                                struct vm_fault *vmf)
 {
+        pgoff_t pgoff;
         struct page **pages;
 
-        BUG_ON(address < vma->vm_start || address >= vma->vm_end);
+        /*
+         * special mappings have no vm_file, and in that case, the mm
+         * uses vm_pgoff internally. So we have to subtract it from here.
+         * We are allowed to do this because we are the mm; do not copy
+         * this code into drivers!
+         */
+        pgoff = vmf->pgoff - vma->vm_pgoff;
 
-        address -= vma->vm_start;
-        for (pages = vma->vm_private_data; address > 0 && *pages; ++pages)
-                address -= PAGE_SIZE;
+        for (pages = vma->vm_private_data; pgoff && *pages; ++pages)
+                pgoff--;
 
         if (*pages) {
                 struct page *page = *pages;
                 get_page(page);
-                return page;
+                vmf->page = page;
+                return 0;
         }
 
-        return NOPAGE_SIGBUS;
+        return VM_FAULT_SIGBUS;
 }
 
 /*
@@ -2194,7 +2201,7 @@ static void special_mapping_close(struct vm_area_struct *vma)
 
 static struct vm_operations_struct special_mapping_vmops = {
         .close = special_mapping_close,
-        .nopage = special_mapping_nopage,
+        .fault = special_mapping_fault,
 };
 
 /*