OK, I just read the text again, and the sentences before the one with the 0xfffff indeed sounded like the the start address was at the last byte. I've reworded the text now a little bit so that it should be more accurate.
** Changed in: qemu Status: Invalid => Fix Released -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/995758 Title: Possibly inaccurate statement in PC Platform Docs Status in QEMU: Fix Released Bug description: The documentation at: http://wiki.qemu.org/Documentation/Platforms/PC Contains the statement that the processor, after reset, executes code starting from address 0xFFFFF, corresponding to the last byte of the single megabyte of memory in the old 8086 address range. From my recollection of working in the microcomputer industry in the late 1980's, execution actually starts in real mode at the start of the last 16 bytes of addressable memory, at 0xFFFF0. Think about it - if it's the last byte there's no room for an address operand to accompany a 1-byte opcode. To manage notifications about this bug go to: https://bugs.launchpad.net/qemu/+bug/995758/+subscriptions