As far as I know, the u area is *not* readable by user processes on any
current ports.  Generally, the signal trampoline is copied to the top of
the user stack, so that the user process doesn't need access to any
kernel memory to execute it.

It used to be the case, in earlier releases of BSD from UCB, that the u
area was mapped into the user process, but this is no longer the case.