--- qemu-0.9.1/hw/iommu.c.orig	2008-01-06 11:38:42.000000000 -0800
+++ qemu-0.9.1/hw/iommu.c	2008-07-01 10:10:42.000000000 -0700
@@ -293,9 +293,9 @@
                 iommu_bad_addr(opaque, page, is_write);
                 return;
             }
-            cpu_physical_memory_write(phys_addr, buf, len);
+            cpu_physical_memory_write(phys_addr, buf, l);
         } else {
-            cpu_physical_memory_read(phys_addr, buf, len);
+            cpu_physical_memory_read(phys_addr, buf, l);
         }
         len -= l;
         buf += l;