b24 scaffold: S12 + poll-bit2 baked, default b24

2026-09-13 11:37:15 +00:00
parent d2d180feac
commit 15eeba929d
4 changed files with 24 additions and 1 deletions
@@ -698,6 +698,11 @@ static void saimaa_machine_init(MachineState *machine)
                uint32_t v = 0x08006B8D;
                cpu_physical_memory_write(0x080528D0, &v, 4);
            }
+            /* HW-ready bit (b25): [0x073A100] bit2 (SBL read-only poll). */
+            {
+                uint32_t v = 0x00000004;
+                cpu_physical_memory_write(0x073A100, &v, 4);
+            }
            /* PBL world-switch Thumb-stub (b24, 4B @0x00221EF8):
             * movs r0,#0; bx lr (return 0 to dispatcher, TZ deferred).
             * Overwrites ARM trampoline head (recoverable from ELF). */
@@ -705,6 +710,12 @@ static void saimaa_machine_init(MachineState *machine)
                uint32_t v = 0x47702000;
                cpu_physical_memory_write(0x00221EF8, &v, 4);
            }
+            /* S12-stub (b25, 2B @0x08006964): blx-to-padding becomes
+             * bx lr (caller ignores r0). PBL would place ARM helper. */
+            {
+                uint16_t v = 0x4770;
+                cpu_physical_memory_write(0x08006964, &v, 2);
+            }
            {
                uint32_t fill = 0x08006B8D;
                uint32_t a;