(adding a few more pieces of information) ... and they also messed this up in SVN r73086; they fixed only the switch/case statement in RelocateSectionExecDyn(), exactly the function that is *not* exercised for VMMR0.r0 as that's an ET_REL file, not an ET_DYN. :)
Reiterating: the rev2 patch in the upstream bugreport looks good; they imported the wrong version into SVN. Jan
