af7ddd3659
unaligned transfers and adjust the physical address to align the transfer. If the buffer end just crossed the page boundary, the computation of the NEXTPTR physical address resulted in using -1. The cleanup at the end of the DMA transfer would try to copy the residual data to physical address 0x1ffffffc. This would silently corrupt data on the R3000 and usually would hang the R4000.