abuse@spamalicious.com said:
> My guess is that a newer  version of binutils stopped linking it with
> the traditional VA offset  (0x5ffe0000), and so now it's mapping at 0.
> 

Hmm - here is what "objdump" says.
best regards
Matthias

# objdump -h /libexec/ld.elf_so

/libexec/ld.elf_so:     file format elf32-littlemips

Sections:
Idx Name          Size      VMA       LMA       File off  Algn
  0 .reginfo      00000018  5ffe00e0  5ffe00e0  000000e0  2**4
                  CONTENTS, ALLOC, LOAD, READONLY, DATA, LINK_ONCE_SAME_SIZE
  1 .dynamic      000000d8  5ffe0100  5ffe0100  00000100  2**4
                  CONTENTS, ALLOC, LOAD, READONLY, DATA
  2 .hash         000006b0  5ffe01e0  5ffe01e0  000001e0  2**4
                  CONTENTS, ALLOC, LOAD, READONLY, DATA
  3 .dynsym       00000e50  5ffe0890  5ffe0890  00000890  2**4
                  CONTENTS, ALLOC, LOAD, READONLY, DATA
  4 .dynstr       00000b56  5ffe16e0  5ffe16e0  000016e0  2**4
                  CONTENTS, ALLOC, LOAD, READONLY, DATA
  5 .text         00008fb0  5ffe2610  5ffe2610  00002610  2**4
                  CONTENTS, ALLOC, LOAD, READONLY, CODE
  6 .rodata       000010f0  5ffeb5c0  5ffeb5c0  0000b5c0  2**4
                  CONTENTS, ALLOC, LOAD, READONLY, DATA
  7 .note.netbsd.ident 00000018  5ffec6b0  5ffec6b0  0000c6b0  2**2
                  CONTENTS, ALLOC, LOAD, READONLY, DATA
  8 .data         00000340  6002c6d0  6002c6d0  0000c6d0  2**4
                  CONTENTS, ALLOC, LOAD, DATA
  9 .got          000003bc  6002ca10  6002ca10  0000ca10  2**4
                  CONTENTS, ALLOC, LOAD, DATA
 10 .sbss         00000034  6002cdcc  6002cdcc  0000cdcc  2**2
                  ALLOC
 11 .bss          000009b0  6002ce00  6002ce00  0000cdcc  2**4
                  ALLOC
 12 .comment      00000318  00000000  00000000  0000cdd4  2**0
                  CONTENTS, READONLY
 13 .pdr          00001120  00000000  00000000  0000d0ec  2**2
                  CONTENTS, READONLY
 14 .compact_rel  00000e34  00000000  00000000  0000e20c  2**2
                  CONTENTS, READONLY
 15 .rel.dyn      000003d0  5ffe2240  5ffe2240  00002240  2**4
                  CONTENTS, ALLOC, LOAD, READONLY, DATA
 16 .mdebug.abi32 00000000  00000000  00000000  0000f040  2**0
                  CONTENTS, READONLY
 17 .ident        000003a8  00000000  00000000  0000f040  2**0
                  CONTENTS, READONLY
# objdump -f /libexec/ld.elf_so

/libexec/ld.elf_so:     file format elf32-littlemips
architecture: mips:3000, flags 0x00000150:
HAS_SYMS, DYNAMIC, D_PAGED
start address 0x5ffe2610