Solved - copy/paste error. However, if JMPC didn't work, the remaining ones won't work either.
If anyone wants to fiddle with the code, here's the FIR to enable the boot flag (on any firmware version):
BOOTF80D.FIR.
This will modify your camera.After enabling the boot flag in the camera, you may run:
- the
portable display test (copy autoexec.bin and make your card bootable)
- the
portable ROM dumper (you may have to format the card to a very small size, or
dd this 256MB image -
howto)
- anything compiled from the
recovery branch (it runs from bootloader context); check Makefile.user.default for options
- the
digic6-dumper branch (you will have to modify the code and experiment - it won't boot in its current state)
For troubleshooting the above experiment (trying to run code alongside Canon firmware):
- make sure you are running firmware 1.0.1
- make your card bootable
- compile autoexec.bin from digic6-dumper (full boot, works in QEMU but not on the camera) or from 80D-troubleshooting (partial boot - last good is cc66eb4 = JMPB)
- no other data files are required at this time
- tell me what I'm doing wrong (you may study the above ARM docs, get an execution trace in QEMU, try similar code on another ARMv7 device or whatever else you can think of)
(I'm still looking into it)