In part5-framebuffer/fb.c line 15, you have given the value buffer size in bytes a second time for mbox[4].
Based on my understanding of https://github.com/raspberrypi/firmware/wiki/Mailbox-property-interface, this should actually be set to 0 for the "request code"; I think that this is coincidentally working right now because the only requirement is for bit 31 to be clear (which is the case for your sizes).
After the tag response has been written by the GPU, this value should have been changed to 0x80000000 (i.e. bit 31 set). These request/response values are the same as the buffer request/response code (which you correctly set on line 11 to mbox[1]), which can be a bit confusing.
In
part5-framebuffer/fb.c
line 15, you have given the value buffer size in bytes a second time formbox[4]
.Based on my understanding of https://github.com/raspberrypi/firmware/wiki/Mailbox-property-interface, this should actually be set to
0
for the "request code"; I think that this is coincidentally working right now because the only requirement is for bit 31 to be clear (which is the case for your sizes).After the tag response has been written by the GPU, this value should have been changed to
0x80000000
(i.e. bit 31 set). These request/response values are the same as the buffer request/response code (which you correctly set on line 11 tombox[1]
), which can be a bit confusing.