From the comments you both provided me, I can only conclude the framebuffer address for rotated modes is not calculated properly.
This is really puzzling as it does work perfectly on the iPAQ 3900 which has the same "landscape" native mode.
I don't have the code here (I'm at work) but will try to take a look tonight.