I don't exactly know how it's done, but it's doesn't look like memory-mapped hardware...
p = 0x1163B8E0;
if(dg++ == 10) *p = 0xDA;
sprintf(osd_buf, "%02X", *p);
draw_txt_string(3, 0, osd_buf);
that actually changes the value and it's persistent. Looks like normal memory to me and it can possibly be used for applications as long as they don't involve taking pictures
It's also not overwritten when I record a video. This all on my S5IS of course.
Anyway, this looks like either some task copies the stuff there or the hardware copies it there directly (DMA?). I don't really think it'd be possible to write there if it were the sensor itself.