Just a lack of progress report on the 1.1.6 to 1.1.8 firmware update.
6D.116 in QEMU:
[BOOT] reserved 605952 bytes for ML (used 531520)
K302 READY
[SF] InstallSerialFlash 4 0xc022002c 0x0 0x800000 1
[SF] GPIO Base 0xc022002c 0xc022002c
[ init:ff149bfc ] (00:01) [SF] SetCSSerialFlash : 0xc022002c 0x46
[ init:ff146a58 ] (00:01) [PM] DisablePowerSave (Counter = 1)
[ init:ff0c32b0 ] (8b:16)
K302 ICU Firmware Version 1.1.6 ( 5.8.4 )
[ init:ff0c32c4 ] (8b:05)
ICU Release DateTime 2014.10.23 17:38:50
[ init:ff0fc404 ] (00:03) [SEQ] CreateSequencer (Startup, Num = 6)
[ init:ff0fc658 ] (00:02) [SEQ] NotifyComplete (Startup, Flag = 0x10000)
[ init:ff0fc6bc ] (00:03) [SEQ] NotifyComplete (Cur = 0, 0x10000, Flag = 0x10000)
[BOOT] 113B84 now contains 0, restoring 0.
...
6D.118 in QEMU
[BOOT] reserved 605952 bytes for ML (used 531520)
K302 READY
[SF] InstallSerialFlash 4 0xc022002c 0x0 0x800000 1
[SF] GPIO Base 0xc022002c 0xc022002c
[BOOT] 113B84 now contains BAAABAAA, restoring 0.
Any clues what stub, constant, whatever, I've got wrong that is causing this bug -- err, sheep?
[EDIT] Well I did find where this message is being generated.
src/boot-hack.c
#ifdef ARMLIB_OVERFLOWING_BUFFER
// Restore the overwritten value.
// Refuse to boot if ARMLIB_OVERFLOWING_BUFFER is incorrect.
qprintf("[BOOT] %X now contains %X, restoring %X.\n", backup_address, *backup_address, backup_data);
while (backup_address == 0);
while (*backup_address == 0xbaaabaaa);
*backup_address = backup_data;
#endif
[EDIT 2] Got past that sticking point but QEMU is telling me to give up for now. Will try again later:
[****] Starting task 44c8f4(0) ml_init
[BKT] giving up.
[****] Starting task 44c6f8(0) ml_backup
[****] Starting task 4549f0(0) menu_task
[****] Starting task 456bcc(0) menu_redraw_task
[****] Starting task 46bd4c(0) focus_task
[****] Starting task 46d050(0) notifybox_task
[****] Starting task 46fbb8(0) fps_task
[****] Starting task 4777b0(0) shoot_task
[****] Starting task 47093c(0) clock_task
[****] Starting task 47e768(0) audio_common_task
[****] Starting task 486420(0) livev_hiprio_task
[****] Starting task 484c58(0) cls_task
[****] Starting task 490c5c(0) console_task
[****] Starting task 458d7c(0) debug_task
[****] Starting task 4614f4(0) tweak_task
[****] Starting task 46cb3c(0) focus_misc_task
[****] Starting task 479afc(0) vignetting_init
[****] Starting task 496344(0) module_task
[****] Starting task 485d94(0) livev_loprio_task
[BKT] giving up.
[BKT] giving up.
[BKT] giving up.
[BKT] giving up.
[BKT] giving up.
[BKT] giving up.
[BKT] giving up.
[BKT] giving up.
[BKT] giving up.
[BKT] giving up.
...