It looks like we're getting there :) This patch (against the stock openwrt-svn) combines the ideas from David and Claudio (with some fixes in the byte ordering) into something that can write a bootable kernel image to the flash. However, the resulting kernel cannot read the pre-2.6.17 yaffs format because of the different blockStatus encoding. While I can get two-way compatibility by also including the block status byte in an oob_free range and handling it at the yaffs level, I don't know if it doing that is a good idea. What do you think? Andrea