hi all I found a bug in qemu, when i invoke: cpu_physical_memory_rw(addr, mem_buf, noOfBytes, 0); where addr=0xffff0 and noOfBytes=50, qemu will has segmentation fault. I call the cpu_physical_memory_rw right after the qemu is started (haven't run yet) with gdb. Thanksfrom Peter
