Jaeger wrote:
Where do the other two scanlines fit in? Are they both between vblank and the start of the next frame? End of frame and vblank?
Both.
The picture is scanlines 0 through 239, and vertical blanking is scanlines 241 through 260 (PAL 310) inclusive. On scanlines 240 and 261 (PAL 311), the PPU goes through the motions of VRAM fetching but renders nothing, in order to get the prefetch buffers into a known state for scanline 0. I'm guessing that like the other inefficiencies of the NES PPU, this was done to save gates.