I was thinking the same thing -- I reviewed the code and found that I lazily didn't implement the LCWRITE switches to only take effect until the second write access. But even after implementing that it still crashes the same way. :-( Is there a good test suite for this sort of thing?