Ralf Sauther <rhs@inka.de> writes:

> 
> Unfortunately not :-( The crash seems to be in the same routine
> (cpu_initclock) as before the patching.
> 
> data fault: pc=f80e2f34 addr=fe000004 ser=8080<WRITE,INVAL>

Oh, okay.  I don't think you said what routine it was in before,
although I suppose I should have noticed it was a write.  *sigh*

Anyway, this sounds like what I'd expect if timerattach() (which maps
in the clock) hasn't been run.  Is there a line for `timer0' in the
probe output?