Debugging bare metal code for RPi3 using Qemu

To debug my bare metal code, I found that I could use qemu with the following command, but only with a simple modification to qemu.

qemu-system-aarch64 -m 1024 -cpu cortex-a53 -machine raspi3 -smp 4 -bios kernel8.img

Without modifying qemu, my code, the "bios", gets loaded at 0x80000; there's no option to change this, but editing the definition of FIRMWARE_ADDR_3 in qemu-3.0.0/hw/arm/raspi.c and re-compiling works.