<jma>
ok I'm giving up. I fixed the zrleaddr problem and tried many things but nothing worked. I'm not even sure that the boorloader is really starting the kernel. The only way I found to debug is to dump memory from the recovery image.
<jma>
Is it possible to trigger a reboor of the board with few asm instructions ? Just to check that a code section is reached