dahabit / npkern Goto Github PK
View Code? Open in Web Editor NEWThis project forked from fenugrec/npkern
Nissan / Infiniti ECU reflashing kernel, for use with nisprog
License: GNU General Public License v3.0
This project forked from fenugrec/npkern
Nissan / Infiniti ECU reflashing kernel, for use with nisprog
License: GNU General Public License v3.0
************************** nisprog reflashing kernel ************************** See "doc/COMPILING.txt", and "doc/USING.txt", for details. In this document: * General info * Kernel Features * Limitations * Source code structure * Porting to other devices / testing on different ECUs **** General info Project presentation: http://www.romraider.com/forum/viewtopic.php?f=45&t=12999 Original crowdfunding campaign: https://www.crowdsupply.com/nisprog/reflashing-kernel This is open-source, thanks to all the campaign backers. See "SPONSORS.txt" ! This project completes an entirely open-source solution for reflashing Nissan/Infiniti ECUs over a K-line communications link. * Which ECUs Will This Work On? Most gasoline Nissan / Infiniti ECUs from ~ 2002 onwards share very similar ECU hardware, based on SuperH microcontrollers manufactured by Renesas (previously Hitachi). This project supports ECUs that use the OBD-II “K line” signal for diagnostics communications. * How Does the Reflash Process Work? The process is carried out entirely over the OBD-II “K Line” serial communications link through an undocumented set of manufacturer-defined extensions to the standard ISO14230 protocol. Recently, the necessary commands have been reverse-engineered revealing the required steps: 1. Establish connection to the ECU. 2. Send the first stage data payload: this is the “kernel”, a simple program that will receive commands and data for the reflash. 3. Make the ECU run the kernel. From this point on, the kernel runs from RAM and effectively takes control of the whole ECU. 4. Send the reflash commands and new firmware data to the kernel. 5. Reset the ECU: the new firmware will now be executed, and the kernel will be completely removed. **** Kernel Features The basic kernel is an implementation of an ISO14230-compliant protocol with extensions; it implements the following requests: - fast ROM dump (tested up to 5.4 kB/s; typical speed is ~100 B/s without a kernel) - Read ROM/RAM/external EEPROM - Write to RAM - Erase flash ROM block - Write flash ROM block **** Limitations There are several important points to be aware of when using Nisprog: - The ECU is a safety-critical system in a car. Reflashing an ECU can void warranties, reduce the vehicle’s reliability, and cause a whole variety of undesirable consequences. Use of this project and any associated tools (freediag, Nisprog, etc) is of course entirely at the user’s risk. Standard disclaimers apply. - Reflashing an ECU may be illegal in some areas. Responsibility in this matter lies again with the user. - Diesel ECUs are not supported, the reflashing process is entirely different. - Tuning and modifying ROMs are complex skills that can only be acquired through significant investments of time and effort! - These SH705* ICs are typically rated for about hundred re-write cycles, beyond which Flash retention may degrade. Experience seems to indicate the actual endurance can be significantly higher, but as with any Flash memory, excessive re-writes should be avoided (for example, live-tuning applications) **** Source code structure (WIP) precompiled/* : kernels compiled with the latest source release (possibly not as up-to-date as the git repo) reg_defines/* : includes for peripheral register address definitions cmd_parser* : command parser and dispatcher for the iso14230 communications over K line eep_funcs* : onboard EEPROM access helpers / functions functions.h : helpers for low-level SuperH intrinsics (setting special registers etc) intprg, ivect* : interrupt vectors and handlers iso_cmds.h : definitions for supported ISO commands / SIDs lkr_* : linker script, this defines where the kernel will be compiled + loaded in RAM main.c : main platf* : this is to split the CPU (platform)-specific code from the generic code. In here are the actual reflash algos, etc. start_705x.s : initial self-loader code, this is the first thing that runs at the RAMjump step. stypes.h : shorthand for common types **** Porting to other devices (WIP) - verify if the linker script is adequate (it won't work as-is for 7050/7051) - implement the functions declared in platf.h, in a new platf_XYZ.c file or maybe inside one of the existing platf*.c files if similar enough - check if the WDT function will be adequate (i.e. toggle a certain pin every 2ms). - on that topic : the kernel obtains the WDT pin info at startup (see main.c , "struct rj_preload"). How this works is: -- just before running the kernel, it fills in a few RAM values at a certain location (always at FFFF8000 for 7055/7058 ?? uncertain). -- these values are the WDT pin port address, WDT pin #, and some other unknown values.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.