BTW, looking at the Promise code I see

cam_con.h:
/* for ASIC bug, limit the last element of SG byteCount must < 32 Dword */
#define SG_COUNT_ASIC_BUG       32
//#define SG_COUNT_ASIC_BUG     128

	and in the code itself

/* check PRD table, last element <= (32 Dword), fix ASIC bug */

(though the code obviously uses SG_COUNT_ASIC_BUG==32, as the first 
paste indicates)

so it seems like Promise first used 128 (32 dwords), but then backed 
down to 32 (8 dwords).

Either way, we definitely have an ASIC bug to work around, it seems...

	Jeff