I'm still working on my code to inject undefined instruction traps into the guest when we don't emulate, so that's not here yet. (it seems to swallow them silently in do_DataAbort, but I'm still verifying that I'm injecting them correctly). Meanwhile, there are a few important fixes here. Annoyingly, my guest kernel doesn't seem to need the "Hack alert!!!" emulation Marc added, so I can't nail down exactly what that emulation should cover. Similarly, my kernel doesn't access cp15 c15 either. Feedback gratefully received (esp. on my second-ever ARM asm code ;) Thanks, Rusty. -- How could I marry someone with more hair than me? http://baldalex.org