Commit 9b3faf0d49 for qemu.org

commit 9b3faf0d497b2be53782e26de1ae099af1d01c78
Author: GuoHan Zhao <zhaoguohan@kylinos.cn>
Date:   Fri Apr 3 09:44:41 2026 +0800

    hw/arm/omap_sx1: map CS3 at the correct base

    omap_sx1 wires the "sx1.cs3" region to OMAP_CS2_BASE instead of
    OMAP_CS3_BASE.

    That places both CS2 and CS3 at the same address and leaves the real
    CS3 window unmapped. Point the CS3 region at OMAP_CS3_BASE so the
    static chip-select layout matches the OMAP address definitions.

    Signed-off-by: GuoHan Zhao <zhaoguohan@kylinos.cn>
    Fixes: ba1580299d0 ("omap_sx1: convert to memory API")
    Reviewed-by: Philippe Mathieu-Daudé <philmd@linaro.org>
    Message-ID: <20260403014441.38725-1-zhaoguohan@kylinos.cn>
    Signed-off-by: Philippe Mathieu-Daudé <philmd@linaro.org>

diff --git a/hw/arm/omap_sx1.c b/hw/arm/omap_sx1.c
index d858dab325..bcb7105323 100644
--- a/hw/arm/omap_sx1.c
+++ b/hw/arm/omap_sx1.c
@@ -146,7 +146,7 @@ static void sx1_init(MachineState *machine, const int version)
     memory_region_init_io(&cs[3], NULL, &static_ops, &cs3val,
                           "sx1.cs3", OMAP_CS3_SIZE);
     memory_region_add_subregion(address_space,
-                                OMAP_CS2_BASE, &cs[3]);
+                                OMAP_CS3_BASE, &cs[3]);

     fl_idx = 0;
     if ((dinfo = drive_get(IF_PFLASH, 0, fl_idx)) != NULL) {