pablomarx

I believe the issue is the improper use of strlen() inside [_subtlv_decrypt](https://github.com/younghyunjo/esp32-homekit/blob/f5acc6d6c8349c79ba1dec407b1968fe21e889a3/src/pair_setup.c#L47). Changing: `*subtlv_length = strlen((char*)*subtlv);` to: `*subtlv_length = encrypted_tlv->length;` resolves the issue for me. Inside `_ios_device_signature_verify`, `tlv_decode` failed to...

@vstrakh I've added a branch `ag1k-pllx` which has a new directory under examples, `blinky-pll`. This resolves the crashing issues with af, and af now emits a bitstream.

The PLL may not be working on the hardware yet – this is why I've left it in a branch instead of merging into master. Looking at `output/Blinky_routed.v` this `inclk`...

The PLL is definitely being enabled in the bitstream. Using agm-unpack and agm-explain, the existing blinky example has: ``` .config_chain 1 CLK_EN1: 0 CLK_EN2: 0 CLK_EN3: 0 CLK_EN4: 0 CP:...

Awesome! Cursory test works on my dev board – although it works without any input to the PLL's `clkin`. This may be expected behavior though - from `MANUAL_AG1280.pdf`: > AG1280...

I've created a fork of NewTen which is able to download ROMs from 1.x devices using the "serial debugger easter egg", and 2.x devices using Hammer's "Debugger Connection" package. https://github.com/pablomarx/NewTen...

I'd also like to see: - Siemens NotePhone - MP120 v2.0 (I've dumped v1.3) - Cadillac ROM card (e.g. Russ Uzes' "EVTIC Diags 3/26/93 3:05pm", which I believe @splorp possesses)....

And RE: Cadillac dumping, I realize it's a bit tricky. I see a few options (ranked from easiest to hardest): 1. If it has a "memory dump and edit" screen,...

@splorp Is your Bic from the Huston brothers? I think Jim Abeles got his (for a song) from a gent in Atlanta, whom I got my ARMistice and ARMageddon from.

@splorp Don't you have a Batman OMP? Does it boot? Oddball OS version?