diff --git a/src/target/arm966e.c b/src/target/arm966e.c
index effc27282..b5240760e 100644
--- a/src/target/arm966e.c
+++ b/src/target/arm966e.c
@@ -190,12 +190,11 @@ int arm966e_read_cp15(target_t *target, int reg_addr, u32 *value)
 
 	jtag_add_dr_scan(3, fields, TAP_INVALID);
 
-	u8 tmp[4];
-	fields[1].in_value = tmp;
+	fields[1].in_value = (u8 *)value;
 
-	jtag_add_dr_scan_now(3, fields, TAP_INVALID);
+	jtag_add_dr_scan(3, fields, TAP_INVALID);
 
-	*value=le_to_h_u32(tmp);
+	jtag_add_callback(arm_le_to_h_u32, (u8 *)value);
 
 
 #ifdef _DEBUG_INSTRUCTION_EXECUTION_