target-utils: added 10 ms delay at the end of abb_power_off() The deosmification of the ABB access code (replacement of osmo_delay_ms() bogus delays with correctly-timed ones, which are significantly shorter) had one annoying side effect: when executing the poweroff command from any of the programs, one last '=' prompt character was being sent (and received by the x86 host) as the Calypso board powers off. With delays being shorter now, the abb_power_off() function was returning and the standalone program's main loop was printing its prompt before the Iota chip fully executed the switch-off sequence! I thought about inserting an endless tight loop at the end of the abb_power_off() function, but the implemented solution of a 10 ms delay is a little nicer IMO because if the DEVOFF operation doesn't happen for some reason in a manual hacking scenario, there won't be an artificial blocker in the form of a tight loop keeping us from further poking around.

/*
 * This utility uses ETM in synchronous mode to read and dump the contents
 * of the DSP API RAM in a target Calypso GSM device while the firmware is
 * running.
 */

#include <sys/types.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <strings.h>
#include <stdint.h>
#include <endian.h>
#include "exitcodes.h"

#define	APIF_ADDR		0xFFD00000
#define	API_SIZE_IN_WORDS	0x2000

single_op_main()
{
	uint16_t buf[64], *linebase;
	unsigned off;
	int rc, i, j;

	for (off = 0; off < API_SIZE_IN_WORDS; ) {
		rc = do_memory_read_16(APIF_ADDR + off * 2, buf, 0x40);
		if (rc)
			return(rc);
		for (i = 0; i < 8; i++) {
			printf("%04X:", off);
			linebase = buf + i * 8;
			for (j = 0; j < 8; j++)
				printf(" %04X", le16toh(linebase[j]));
			putchar('\n');
			off += 8;
		}
	}
	return(0);
}