Sophie Dexter / Mbed 2 deprecated Just4Trionic

Just4Trionic - CAN and BDM FLASH programmer for Saab cars

Dependencies:   mbed

t5can.cpp@3:92dae9083c83, 2011-06-07 (annotated)

Committer:
Just4pLeisure
Date:
Tue Jun 07 12:23:28 2011 +0000
Revision:
3:92dae9083c83
Parent:
1:d5452e398b76
Child:
5:1775b4b13232
Basic T7 CAN DUMP and FLASH for P-BUS connection only

Requires MyBooty V2.x for T5 CAN FLASHing at 1 Mbps

Who changed what in which revision?

UserRevisionLine numberNew contents of line
Just4pLeisure 1:d5452e398b76 1 /*******************************************************************************
Just4pLeisure 1:d5452e398b76 2
Just4pLeisure 1:d5452e398b76 3 trionic5.cpp - CAN Bus functions for Just4Trionic by Just4pLeisure
Just4pLeisure 1:d5452e398b76 4 (c) 2010 by Sophie Dexter
Just4pLeisure 1:d5452e398b76 5
Just4pLeisure 1:d5452e398b76 6 This C++ module provides functions for reading and writing the FLASH chips and
Just4pLeisure 1:d5452e398b76 7 SRAM in Trionic5 ECUs. (Writing the adaption data back to SRAM not done yet).
Just4pLeisure 1:d5452e398b76 8
Just4pLeisure 1:d5452e398b76 9 Some functions need an additional 'bootloader' program to be sent to the T5 ECU
Just4pLeisure 1:d5452e398b76 10 before they can be used. These functions are: Identifying the T5 ECU type and
Just4pLeisure 1:d5452e398b76 11 FLASH chips, dumping the FLASH chips, erasing the FLASH chips, writing to the
Just4pLeisure 1:d5452e398b76 12 FLASH chips and calculating the FLASH chips' checksum.
Just4pLeisure 1:d5452e398b76 13
Just4pLeisure 1:d5452e398b76 14 My version of the bootloader, BOOTY.S19, includes some features not in other
Just4pLeisure 1:d5452e398b76 15 bootloaders; identifying the ECU and FLASH chip types, a 'safer' way of dumping
Just4pLeisure 1:d5452e398b76 16 the FLASH chips and the ability to program AMD 29F010 type FLASH chips
Just4pLeisure 1:d5452e398b76 17
Just4pLeisure 1:d5452e398b76 18 ********************************************************************************
Just4pLeisure 1:d5452e398b76 19
Just4pLeisure 1:d5452e398b76 20 WARNING: Use at your own risk, sadly this software comes with no guarantees.
Just4pLeisure 1:d5452e398b76 21 This software is provided 'free' and in good faith, but the author does not
Just4pLeisure 1:d5452e398b76 22 accept liability for any damage arising from its use.
Just4pLeisure 1:d5452e398b76 23
Just4pLeisure 1:d5452e398b76 24 *******************************************************************************/
Just4pLeisure 1:d5452e398b76 25
Just4pLeisure 1:d5452e398b76 26 #include "t5can.h"
Just4pLeisure 1:d5452e398b76 27
Just4pLeisure 1:d5452e398b76 28 // constants
Just4pLeisure 1:d5452e398b76 29 #define CMD_BUF_LENGTH 32 ///< command buffer size
Just4pLeisure 1:d5452e398b76 30
Just4pLeisure 1:d5452e398b76 31 // static variables
Just4pLeisure 1:d5452e398b76 32 static char cmd_buffer[CMD_BUF_LENGTH]; ///< command string buffer
Just4pLeisure 1:d5452e398b76 33
Just4pLeisure 1:d5452e398b76 34 //static uint32_t cmd_addr; ///< address (optional)
Just4pLeisure 1:d5452e398b76 35 //static uint32_t cmd_value; ///< value (optional)
Just4pLeisure 1:d5452e398b76 36 //static uint32_t cmd_result; ///< result
Just4pLeisure 1:d5452e398b76 37
Just4pLeisure 1:d5452e398b76 38 static uint32_t flash_start = 0;
Just4pLeisure 1:d5452e398b76 39
Just4pLeisure 1:d5452e398b76 40 // private functions
Just4pLeisure 1:d5452e398b76 41 uint8_t execute_t5_cmd();
Just4pLeisure 1:d5452e398b76 42 void t5_can_show_help();
Just4pLeisure 1:d5452e398b76 43 void t5_can_show_full_help();
Just4pLeisure 1:d5452e398b76 44
Just4pLeisure 1:d5452e398b76 45 void t5_can() {
Just4pLeisure 1:d5452e398b76 46 // Start the CAN bus system
Just4pLeisure 1:d5452e398b76 47 // Note that at the moment this is only for T5 ECUs at 615 kbits
Just4pLeisure 1:d5452e398b76 48 can_open();
Just4pLeisure 1:d5452e398b76 49 can_set_speed(615000);
Just4pLeisure 1:d5452e398b76 50
Just4pLeisure 1:d5452e398b76 51 t5_can_show_help();
Just4pLeisure 1:d5452e398b76 52
Just4pLeisure 1:d5452e398b76 53 // main loop
Just4pLeisure 1:d5452e398b76 54 *cmd_buffer = '\0';
Just4pLeisure 1:d5452e398b76 55 char ret;
Just4pLeisure 1:d5452e398b76 56 char rx_char;
Just4pLeisure 1:d5452e398b76 57 while (true) {
Just4pLeisure 1:d5452e398b76 58 // read chars from USB
Just4pLeisure 1:d5452e398b76 59 // send received messages to the pc over USB connection
Just4pLeisure 1:d5452e398b76 60 // This function displays any CAN messages that are 'missed' by the other functions
Just4pLeisure 1:d5452e398b76 61 // Can messages might be 'missed' because they are received after a 'timeout' period
Just4pLeisure 1:d5452e398b76 62 // or because they weren't expected, e.g. if the T5 ECU resets for some reason
Just4pLeisure 1:d5452e398b76 63 t5_can_show_can_message();
Just4pLeisure 1:d5452e398b76 64 if (pc.readable()) {
Just4pLeisure 1:d5452e398b76 65 // turn Error LED off for next command
Just4pLeisure 1:d5452e398b76 66 led4 = 0;
Just4pLeisure 1:d5452e398b76 67 rx_char = pc.getc();
Just4pLeisure 1:d5452e398b76 68 switch (rx_char) {
Just4pLeisure 1:d5452e398b76 69 // 'ESC' key to go back to mbed Just4Trionic 'home' menu
Just4pLeisure 1:d5452e398b76 70 case '\e':
Just4pLeisure 1:d5452e398b76 71 can_close();
Just4pLeisure 1:d5452e398b76 72 return;
Just4pLeisure 1:d5452e398b76 73 // end-of-command reached
Just4pLeisure 1:d5452e398b76 74 case TERM_OK :
Just4pLeisure 1:d5452e398b76 75 // execute command and return flag via USB
Just4pLeisure 1:d5452e398b76 76 timer.reset();
Just4pLeisure 1:d5452e398b76 77 timer.start();
Just4pLeisure 1:d5452e398b76 78 ret = execute_t5_cmd();
Just4pLeisure 1:d5452e398b76 79 pc.putc(ret);
Just4pLeisure 3:92dae9083c83 80 printf("Completed in %.3f seconds.\r\n", timer.read());
Just4pLeisure 1:d5452e398b76 81 // reset command buffer
Just4pLeisure 1:d5452e398b76 82 *cmd_buffer = '\0';
Just4pLeisure 1:d5452e398b76 83 // light up LED
Just4pLeisure 1:d5452e398b76 84 // ret == TERM_OK ? led_on(LED_ACT) : led_on(LED_ERR);
Just4pLeisure 1:d5452e398b76 85 ret == TERM_OK ? led3 = 1 : led4 = 1;
Just4pLeisure 1:d5452e398b76 86 break;
Just4pLeisure 1:d5452e398b76 87 // another command char
Just4pLeisure 1:d5452e398b76 88 default:
Just4pLeisure 1:d5452e398b76 89 // store in buffer if space permits
Just4pLeisure 1:d5452e398b76 90 if (StrLen(cmd_buffer) < CMD_BUF_LENGTH - 1) {
Just4pLeisure 1:d5452e398b76 91 StrAddc(cmd_buffer, rx_char);
Just4pLeisure 1:d5452e398b76 92 }
Just4pLeisure 1:d5452e398b76 93 break;
Just4pLeisure 1:d5452e398b76 94 }
Just4pLeisure 1:d5452e398b76 95 }
Just4pLeisure 1:d5452e398b76 96 }
Just4pLeisure 1:d5452e398b76 97 }
Just4pLeisure 1:d5452e398b76 98
Just4pLeisure 1:d5452e398b76 99 //-----------------------------------------------------------------------------
Just4pLeisure 1:d5452e398b76 100 /**
Just4pLeisure 1:d5452e398b76 101 Executes a command and returns result flag (does not transmit the flag
Just4pLeisure 1:d5452e398b76 102 itself).
Just4pLeisure 1:d5452e398b76 103
Just4pLeisure 1:d5452e398b76 104 @return command flag (success / failure)
Just4pLeisure 1:d5452e398b76 105 */
Just4pLeisure 1:d5452e398b76 106 uint8_t execute_t5_cmd() {
Just4pLeisure 1:d5452e398b76 107
Just4pLeisure 1:d5452e398b76 108
Just4pLeisure 1:d5452e398b76 109 // uint8_t cmd_length = strlen(cmd_buffer);
Just4pLeisure 1:d5452e398b76 110 // command groups
Just4pLeisure 1:d5452e398b76 111 switch (*cmd_buffer) {
Just4pLeisure 1:d5452e398b76 112 // CHECK_ARGLENGTH(0);
Just4pLeisure 1:d5452e398b76 113 // Get the Symbol Table
Just4pLeisure 1:d5452e398b76 114 case 's':
Just4pLeisure 1:d5452e398b76 115 return t5_can_get_symbol_table()
Just4pLeisure 1:d5452e398b76 116 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 117 case 'S':
Just4pLeisure 1:d5452e398b76 118 return T5ReadCmnd(T5SYMBOLS)
Just4pLeisure 1:d5452e398b76 119 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 120
Just4pLeisure 1:d5452e398b76 121 // Get the Trionic5 software version string
Just4pLeisure 1:d5452e398b76 122 case 'v':
Just4pLeisure 1:d5452e398b76 123 return t5_can_get_version()
Just4pLeisure 1:d5452e398b76 124 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 125 case 'V':
Just4pLeisure 1:d5452e398b76 126 return T5ReadCmnd(T5VERSION)
Just4pLeisure 1:d5452e398b76 127 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 128
Just4pLeisure 1:d5452e398b76 129 // Read Adaption Data from RAM and write it to a file
Just4pLeisure 1:d5452e398b76 130 case 'r':
Just4pLeisure 1:d5452e398b76 131 case 'R':
Just4pLeisure 1:d5452e398b76 132 return t5_can_get_adaption_data()
Just4pLeisure 1:d5452e398b76 133 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 134
Just4pLeisure 1:d5452e398b76 135 // CR - send CR type message
Just4pLeisure 1:d5452e398b76 136 case '\0':
Just4pLeisure 1:d5452e398b76 137 return T5ReadCmnd(CR)
Just4pLeisure 1:d5452e398b76 138 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 139
Just4pLeisure 1:d5452e398b76 140 // Get a single symbol from the Symbol Table
Just4pLeisure 1:d5452e398b76 141 case 'a':
Just4pLeisure 1:d5452e398b76 142 char symbol[40];
Just4pLeisure 1:d5452e398b76 143 T5GetSymbol(symbol);
Just4pLeisure 1:d5452e398b76 144 printf("%s",symbol);
Just4pLeisure 1:d5452e398b76 145 return TERM_OK;
Just4pLeisure 1:d5452e398b76 146
Just4pLeisure 1:d5452e398b76 147 // Just send an 'ACK' message
Just4pLeisure 1:d5452e398b76 148 case 'A':
Just4pLeisure 1:d5452e398b76 149 return T5Ack()
Just4pLeisure 1:d5452e398b76 150 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 151
Just4pLeisure 1:d5452e398b76 152 // Send a Bootloader file to the T5 ECU
Just4pLeisure 1:d5452e398b76 153 case 'b':
Just4pLeisure 1:d5452e398b76 154 case 'B':
Just4pLeisure 3:92dae9083c83 155 return (t5_can_send_boot_loader() && can_set_speed(1000000))
Just4pLeisure 3:92dae9083c83 156 // return (t5_can_send_boot_loader() && can_set_speed(615000))
Just4pLeisure 1:d5452e398b76 157 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 158
Just4pLeisure 1:d5452e398b76 159 // Get Checksum from ECU (Bootloader must be uploaded first)
Just4pLeisure 1:d5452e398b76 160 case 'c':
Just4pLeisure 1:d5452e398b76 161 case 'C':
Just4pLeisure 1:d5452e398b76 162 return t5_can_get_checksum()
Just4pLeisure 1:d5452e398b76 163 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 164
Just4pLeisure 1:d5452e398b76 165 // Exit the BootLoader and restart the T5 ECU
Just4pLeisure 1:d5452e398b76 166 case 'q':
Just4pLeisure 1:d5452e398b76 167 case 'Q':
Just4pLeisure 3:92dae9083c83 168 return (t5_can_bootloader_reset() && can_set_speed(615000))
Just4pLeisure 1:d5452e398b76 169 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 170
Just4pLeisure 1:d5452e398b76 171 // Erase the FLASH chips
Just4pLeisure 1:d5452e398b76 172 case 'e':
Just4pLeisure 1:d5452e398b76 173 case 'E':
Just4pLeisure 1:d5452e398b76 174 return t5_can_erase_flash()
Just4pLeisure 1:d5452e398b76 175 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 176
Just4pLeisure 1:d5452e398b76 177 // Read back the FLASH chip types
Just4pLeisure 1:d5452e398b76 178 case 't':
Just4pLeisure 1:d5452e398b76 179 case 'T':
Just4pLeisure 1:d5452e398b76 180 return t5_can_get_start_and_chip_types(&flash_start)
Just4pLeisure 1:d5452e398b76 181 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 182
Just4pLeisure 1:d5452e398b76 183 // DUMP the T5 ECU BIN file stored in the FLASH chips
Just4pLeisure 1:d5452e398b76 184 case 'd':
Just4pLeisure 1:d5452e398b76 185 // NOTE 'd' command Just4TESTING! only dumps T5.5 ECU
Just4pLeisure 1:d5452e398b76 186 return t5_can_dump_flash(T55FLASHSTART)
Just4pLeisure 1:d5452e398b76 187 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 188 case 'D':
Just4pLeisure 1:d5452e398b76 189 if (!t5_can_get_adaption_data())
Just4pLeisure 1:d5452e398b76 190 return TERM_ERR;
Just4pLeisure 1:d5452e398b76 191 if (!t5_can_send_boot_loader())
Just4pLeisure 1:d5452e398b76 192 return TERM_ERR;
Just4pLeisure 3:92dae9083c83 193 can_set_speed(1000000);
Just4pLeisure 1:d5452e398b76 194 if (!t5_can_get_start_and_chip_types(&flash_start)) {
Just4pLeisure 1:d5452e398b76 195 t5_can_bootloader_reset();
Just4pLeisure 3:92dae9083c83 196 can_set_speed(615000);
Just4pLeisure 1:d5452e398b76 197 return TERM_ERR;
Just4pLeisure 1:d5452e398b76 198 }
Just4pLeisure 3:92dae9083c83 199 return (t5_can_dump_flash(flash_start) && t5_can_bootloader_reset() && can_set_speed(615000))
Just4pLeisure 1:d5452e398b76 200 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 201
Just4pLeisure 1:d5452e398b76 202 // Send a FLASH update file to the T5 ECU
Just4pLeisure 1:d5452e398b76 203 case 'f':
Just4pLeisure 1:d5452e398b76 204 // NOTE 'f' command Just4TESTING! only FLASHes T5.5 ECU (with S19 type file)
Just4pLeisure 1:d5452e398b76 205 return t5_can_send_flash_s19_update(T55FLASHSTART)
Just4pLeisure 1:d5452e398b76 206 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 207 case 'F':
Just4pLeisure 1:d5452e398b76 208 if (!t5_can_send_boot_loader())
Just4pLeisure 1:d5452e398b76 209 return TERM_ERR;
Just4pLeisure 3:92dae9083c83 210 can_set_speed(1000000);
Just4pLeisure 1:d5452e398b76 211 if (!t5_can_get_start_and_chip_types(&flash_start)) {
Just4pLeisure 1:d5452e398b76 212 t5_can_bootloader_reset();
Just4pLeisure 3:92dae9083c83 213 can_set_speed(615000);
Just4pLeisure 1:d5452e398b76 214 return TERM_ERR;
Just4pLeisure 1:d5452e398b76 215 }
Just4pLeisure 1:d5452e398b76 216 if (!t5_can_get_checksum())
Just4pLeisure 1:d5452e398b76 217 led4 = 1;
Just4pLeisure 1:d5452e398b76 218 if (!t5_can_erase_flash()) {
Just4pLeisure 1:d5452e398b76 219 t5_can_bootloader_reset();
Just4pLeisure 3:92dae9083c83 220 can_set_speed(615000);
Just4pLeisure 1:d5452e398b76 221 return TERM_ERR;
Just4pLeisure 1:d5452e398b76 222 }
Just4pLeisure 3:92dae9083c83 223 return (t5_can_send_flash_bin_update(flash_start) && t5_can_get_checksum() && t5_can_bootloader_reset() && can_set_speed(615000))
Just4pLeisure 1:d5452e398b76 224 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 225
Just4pLeisure 1:d5452e398b76 226 // Send the C3 message - should get last used address 0x7FFFF
Just4pLeisure 1:d5452e398b76 227 case '3':
Just4pLeisure 1:d5452e398b76 228 return t5_can_get_last_address()
Just4pLeisure 1:d5452e398b76 229 ? TERM_OK : TERM_ERR;
Just4pLeisure 1:d5452e398b76 230
Just4pLeisure 1:d5452e398b76 231 // Print help
Just4pLeisure 1:d5452e398b76 232 case 'h':
Just4pLeisure 1:d5452e398b76 233 t5_can_show_help();
Just4pLeisure 1:d5452e398b76 234 return TERM_OK;
Just4pLeisure 1:d5452e398b76 235 case 'H':
Just4pLeisure 1:d5452e398b76 236 t5_can_show_full_help();
Just4pLeisure 1:d5452e398b76 237 return TERM_OK;
Just4pLeisure 1:d5452e398b76 238 default:
Just4pLeisure 1:d5452e398b76 239 t5_can_show_help();
Just4pLeisure 1:d5452e398b76 240 break;
Just4pLeisure 1:d5452e398b76 241 }
Just4pLeisure 1:d5452e398b76 242 // unknown command
Just4pLeisure 1:d5452e398b76 243 return TERM_ERR;
Just4pLeisure 1:d5452e398b76 244 }
Just4pLeisure 1:d5452e398b76 245
Just4pLeisure 1:d5452e398b76 246 //
Just4pLeisure 1:d5452e398b76 247 // Trionic5ShowHelp
Just4pLeisure 1:d5452e398b76 248 //
Just4pLeisure 1:d5452e398b76 249 // Displays a list of things that can be done with the T5 ECU.
Just4pLeisure 1:d5452e398b76 250 //
Just4pLeisure 1:d5452e398b76 251 // inputs: none
Just4pLeisure 1:d5452e398b76 252 // return: none
Just4pLeisure 1:d5452e398b76 253 //
Just4pLeisure 1:d5452e398b76 254 void t5_can_show_help() {
Just4pLeisure 1:d5452e398b76 255 printf("Trionic 5 Command Menu\r\n");
Just4pLeisure 1:d5452e398b76 256 printf("======================\r\n");
Just4pLeisure 1:d5452e398b76 257 printf("D - Read SRAM adaption and DUMP T5 FLASH BIN file\r\n");
Just4pLeisure 1:d5452e398b76 258 printf("F - FLASH the update file to the T5 (and write SRAM - not done!)\r\n");
Just4pLeisure 1:d5452e398b76 259 printf("\r\n");
Just4pLeisure 1:d5452e398b76 260 printf("r - read SRAM and write it to ADAPTION.RAM file\r\n");
Just4pLeisure 1:d5452e398b76 261 printf("s - read Symbol Table and write it to SYMBOLS.TXT\r\n");
Just4pLeisure 1:d5452e398b76 262 printf("v - read T5 ECU software version, display it and write it to VERSION.TXT\r\n");
Just4pLeisure 1:d5452e398b76 263 printf("\r\n");
Just4pLeisure 1:d5452e398b76 264 printf("'ESC' - Return to Just4Trionic Main Menu\r\n");
Just4pLeisure 1:d5452e398b76 265 printf("\r\n");
Just4pLeisure 1:d5452e398b76 266 printf("h - Show this help menu\r\n");
Just4pLeisure 1:d5452e398b76 267 printf("\r\n");
Just4pLeisure 1:d5452e398b76 268 return;
Just4pLeisure 1:d5452e398b76 269 }
Just4pLeisure 1:d5452e398b76 270 //
Just4pLeisure 1:d5452e398b76 271 // t5_can_show_full_help
Just4pLeisure 1:d5452e398b76 272 //
Just4pLeisure 1:d5452e398b76 273 // Displays a complete list of things that can be done with the T5 ECU.
Just4pLeisure 1:d5452e398b76 274 //
Just4pLeisure 1:d5452e398b76 275 // inputs: none
Just4pLeisure 1:d5452e398b76 276 // return: none
Just4pLeisure 1:d5452e398b76 277 //
Just4pLeisure 1:d5452e398b76 278 void t5_can_show_full_help() {
Just4pLeisure 1:d5452e398b76 279 printf("Trionic 5 Command Menu\r\n");
Just4pLeisure 1:d5452e398b76 280 printf("======================\r\n");
Just4pLeisure 1:d5452e398b76 281 printf("D - Read SRAM adaption and DUMP T5 FLASH BIN file\r\n");
Just4pLeisure 1:d5452e398b76 282 printf("F - FLASH the update file to the T5 (and write SRAM - not done!)\r\n");
Just4pLeisure 1:d5452e398b76 283 printf("\r\n");
Just4pLeisure 1:d5452e398b76 284 printf("b - upload and start MyBooty.S19 bootloader\r\n");
Just4pLeisure 1:d5452e398b76 285 printf("c - get T5 ECU FLASH checksum (need to upload BOOTY.S19 before using this command)\r\n");
Just4pLeisure 1:d5452e398b76 286 printf("d - dump the T5 FLASH BIN file and write it to ORIGINAL.BIN\r\n");
Just4pLeisure 1:d5452e398b76 287 printf("e - erase the FLASH chips in the T5 ECU\r\n");
Just4pLeisure 1:d5452e398b76 288 printf("f - FLASH the update file MODIFIED.S19 to the T5 ECU\r\n");
Just4pLeisure 1:d5452e398b76 289 printf("r - read SRAM and write it to ADAPTION.RAM file\r\n");
Just4pLeisure 1:d5452e398b76 290 printf("s - read Symbol Table, display it and write it to SYMBOLS.TXT\r\n");
Just4pLeisure 1:d5452e398b76 291 printf("v - read T5 ECU software version, display it and write it to VERSION.TXT\r\n");
Just4pLeisure 1:d5452e398b76 292 printf("q - exit the bootloader and reset the T5 ECU\r\n");
Just4pLeisure 1:d5452e398b76 293 printf("t - read the FLASH chip type in the T5 ECU\r\n");
Just4pLeisure 1:d5452e398b76 294 printf("3 - read the last used FLASH address in the T5 ECU\r\n");
Just4pLeisure 1:d5452e398b76 295 printf("S - send 's' message (to get symbol table)\r\n");
Just4pLeisure 1:d5452e398b76 296 printf("V - send 'S' message (to get software version)\r\n");
Just4pLeisure 1:d5452e398b76 297 printf("'Enter' Key - send an CR message\r\n");
Just4pLeisure 1:d5452e398b76 298 printf("a - send an ACK\r\n");
Just4pLeisure 1:d5452e398b76 299 printf("A - read a single symbol from the symbol table\r\n");
Just4pLeisure 1:d5452e398b76 300 printf("\r\n");
Just4pLeisure 1:d5452e398b76 301 printf("'ESC' - Return to Just4Trionic Main Menu\r\n");
Just4pLeisure 1:d5452e398b76 302 printf("\r\n");
Just4pLeisure 1:d5452e398b76 303 printf("H - Show this help menu\r\n");
Just4pLeisure 1:d5452e398b76 304 printf("\r\n");
Just4pLeisure 1:d5452e398b76 305 return;
Just4pLeisure 1:d5452e398b76 306 }
Just4pLeisure 1:d5452e398b76 307
Just4pLeisure 1:d5452e398b76 308 //
Just4pLeisure 1:d5452e398b76 309 // t5_can_show_can_message
Just4pLeisure 1:d5452e398b76 310 //
Just4pLeisure 1:d5452e398b76 311 // Displays a CAN message in the RX buffer if there is one.
Just4pLeisure 1:d5452e398b76 312 //
Just4pLeisure 1:d5452e398b76 313 // inputs: none
Just4pLeisure 1:d5452e398b76 314 // return: bool TRUE if there was a message, FALSE if no message.
Just4pLeisure 1:d5452e398b76 315 //
Just4pLeisure 1:d5452e398b76 316 bool t5_can_show_can_message() {
Just4pLeisure 1:d5452e398b76 317 CANMessage can_MsgRx;
Just4pLeisure 1:d5452e398b76 318 if (can.read(can_MsgRx)) {
Just4pLeisure 1:d5452e398b76 319 printf("w%03x%d", can_MsgRx.id, can_MsgRx.len);
Just4pLeisure 1:d5452e398b76 320 for (char i=0; i<can_MsgRx.len; i++) {
Just4pLeisure 1:d5452e398b76 321 printf("%02x", can_MsgRx.data[i]);
Just4pLeisure 1:d5452e398b76 322 }
Just4pLeisure 1:d5452e398b76 323 printf(" %c ", can_MsgRx.data[2]);
Just4pLeisure 1:d5452e398b76 324 printf("\r\n");
Just4pLeisure 1:d5452e398b76 325 return TRUE;
Just4pLeisure 1:d5452e398b76 326 }
Just4pLeisure 1:d5452e398b76 327 return FALSE;
Just4pLeisure 1:d5452e398b76 328 }
Just4pLeisure 1:d5452e398b76 329
Just4pLeisure 1:d5452e398b76 330 //
Just4pLeisure 1:d5452e398b76 331 // t5_can_get_symbol_table
Just4pLeisure 1:d5452e398b76 332 //
Just4pLeisure 1:d5452e398b76 333 // Gets the T5 ECU symbol table.
Just4pLeisure 1:d5452e398b76 334 // The Symbol Table is saved to a file, symbols.txt, on the mbed 'local' file system 'disk'.
Just4pLeisure 1:d5452e398b76 335 //
Just4pLeisure 1:d5452e398b76 336 // inputs: none
Just4pLeisure 1:d5452e398b76 337 // return: bool TRUE if there all went OK, FALSE if there was an error
Just4pLeisure 1:d5452e398b76 338 //
Just4pLeisure 1:d5452e398b76 339 bool t5_can_get_symbol_table() {
Just4pLeisure 1:d5452e398b76 340 printf("Saving the symbol table file\r\n");
Just4pLeisure 1:d5452e398b76 341 FILE *fp = fopen("/local/symbols.txt", "w"); // Open "symbols.txt" on the local file system for writing
Just4pLeisure 1:d5452e398b76 342 if (!fp) {
Just4pLeisure 1:d5452e398b76 343 perror ("The following error occured");
Just4pLeisure 1:d5452e398b76 344 return FALSE;
Just4pLeisure 1:d5452e398b76 345 }
Just4pLeisure 1:d5452e398b76 346 char symbol[40];
Just4pLeisure 1:d5452e398b76 347 T5ReadCmnd(T5SYMBOLS);
Just4pLeisure 1:d5452e398b76 348 if (T5WaitResponse() != '>') {
Just4pLeisure 1:d5452e398b76 349 fclose(fp);
Just4pLeisure 1:d5452e398b76 350 return FALSE;
Just4pLeisure 1:d5452e398b76 351 }
Just4pLeisure 1:d5452e398b76 352 T5ReadCmnd(CR);
Just4pLeisure 1:d5452e398b76 353 if (T5WaitResponse() != '>') {
Just4pLeisure 1:d5452e398b76 354 fclose(fp);
Just4pLeisure 1:d5452e398b76 355 return FALSE;
Just4pLeisure 1:d5452e398b76 356 }
Just4pLeisure 1:d5452e398b76 357 do {
Just4pLeisure 1:d5452e398b76 358 T5GetSymbol(symbol);
Just4pLeisure 1:d5452e398b76 359 // printf("%s",symbol);
Just4pLeisure 1:d5452e398b76 360 if (fprintf(fp,"%s",symbol) < 0) {
Just4pLeisure 1:d5452e398b76 361 fclose (fp);
Just4pLeisure 1:d5452e398b76 362 printf ("ERROR Writing to the symbols.txt file!\r\n");
Just4pLeisure 1:d5452e398b76 363 return FALSE;
Just4pLeisure 1:d5452e398b76 364 };
Just4pLeisure 1:d5452e398b76 365 } while (!StrCmp(symbol,"END\r\n"));
Just4pLeisure 1:d5452e398b76 366 fclose(fp);
Just4pLeisure 1:d5452e398b76 367 return TRUE;
Just4pLeisure 1:d5452e398b76 368 }
Just4pLeisure 1:d5452e398b76 369
Just4pLeisure 1:d5452e398b76 370 //
Just4pLeisure 1:d5452e398b76 371 // t5_can_get_version
Just4pLeisure 1:d5452e398b76 372 //
Just4pLeisure 1:d5452e398b76 373 // Gets the T5 software version string.
Just4pLeisure 1:d5452e398b76 374 // The software version is is sent to the PC and saved to a file, version.txt, on the mbed 'local' file system 'disk'.
Just4pLeisure 1:d5452e398b76 375 //
Just4pLeisure 1:d5452e398b76 376 // inputs: none
Just4pLeisure 1:d5452e398b76 377 // return: bool TRUE if there all went OK, FALSE if there was an error
Just4pLeisure 1:d5452e398b76 378 //
Just4pLeisure 1:d5452e398b76 379 bool t5_can_get_version() {
Just4pLeisure 1:d5452e398b76 380 FILE *fp = fopen("/local/version.txt", "w"); // Open "version.txt" on the local file system for writing
Just4pLeisure 1:d5452e398b76 381 if (!fp) {
Just4pLeisure 1:d5452e398b76 382 perror ("The following error occured");
Just4pLeisure 1:d5452e398b76 383 return FALSE;
Just4pLeisure 1:d5452e398b76 384 }
Just4pLeisure 1:d5452e398b76 385 char symbol[40];
Just4pLeisure 1:d5452e398b76 386 T5ReadCmnd(T5VERSION);
Just4pLeisure 1:d5452e398b76 387 if (T5WaitResponse() != '>') {
Just4pLeisure 1:d5452e398b76 388 fclose(fp);
Just4pLeisure 1:d5452e398b76 389 return FALSE;
Just4pLeisure 1:d5452e398b76 390 }
Just4pLeisure 1:d5452e398b76 391 T5ReadCmnd(CR);
Just4pLeisure 1:d5452e398b76 392 if (T5WaitResponse() != '>') {
Just4pLeisure 1:d5452e398b76 393 fclose(fp);
Just4pLeisure 1:d5452e398b76 394 return FALSE;
Just4pLeisure 1:d5452e398b76 395 }
Just4pLeisure 1:d5452e398b76 396 T5GetSymbol(symbol);
Just4pLeisure 1:d5452e398b76 397 printf("%s",symbol);
Just4pLeisure 1:d5452e398b76 398 if (fprintf(fp,"%s",symbol) < 0) {
Just4pLeisure 1:d5452e398b76 399 fclose (fp);
Just4pLeisure 1:d5452e398b76 400 printf ("ERROR Writing to the version.txt file!\r\n");
Just4pLeisure 1:d5452e398b76 401 return FALSE;
Just4pLeisure 1:d5452e398b76 402 };
Just4pLeisure 1:d5452e398b76 403 fclose(fp);
Just4pLeisure 1:d5452e398b76 404 printf("The version.txt file has been saved.\r\n");
Just4pLeisure 1:d5452e398b76 405 return TRUE;
Just4pLeisure 1:d5452e398b76 406 }
Just4pLeisure 1:d5452e398b76 407
Just4pLeisure 1:d5452e398b76 408 //
Just4pLeisure 1:d5452e398b76 409 // Trionic5GetAdaptionData
Just4pLeisure 1:d5452e398b76 410 //
Just4pLeisure 1:d5452e398b76 411 // Gets the adaption data from the T5's SRAM.
Just4pLeisure 1:d5452e398b76 412 // The adaption data is stored in a hex file, adaption.RAM, on the mbed 'local' file system 'disk'.
Just4pLeisure 1:d5452e398b76 413 //
Just4pLeisure 1:d5452e398b76 414 // Reading the Adaption data from SRAM takes about 6.5 seconds.
Just4pLeisure 1:d5452e398b76 415 //
Just4pLeisure 1:d5452e398b76 416 // inputs: none
Just4pLeisure 1:d5452e398b76 417 // return: bool TRUE if all went OK, FALSE if there was an error.
Just4pLeisure 1:d5452e398b76 418 //
Just4pLeisure 1:d5452e398b76 419 bool t5_can_get_adaption_data() {
Just4pLeisure 1:d5452e398b76 420 printf("Saving the SRAM adaption data.\r\n");
Just4pLeisure 1:d5452e398b76 421 FILE *fp = fopen("/local/adaption.RAM", "w"); // Open "adaption.RAM" on the local file system for writing
Just4pLeisure 1:d5452e398b76 422 if (!fp) {
Just4pLeisure 1:d5452e398b76 423 printf("ERROR: Unable to open a file for the adaption data!\r\n");
Just4pLeisure 1:d5452e398b76 424 return FALSE;
Just4pLeisure 1:d5452e398b76 425 }
Just4pLeisure 1:d5452e398b76 426 unsigned int address = 5; // Mysterious reason for starting at 5 !!!
Just4pLeisure 1:d5452e398b76 427 char RAMdata[6];
Just4pLeisure 1:d5452e398b76 428 while (address < T5RAMSIZE) {
Just4pLeisure 1:d5452e398b76 429 if (!t5_can_read_data(RAMdata, address)) {
Just4pLeisure 1:d5452e398b76 430 fclose (fp);
Just4pLeisure 1:d5452e398b76 431 printf ("Error reading from the CAN bus.\r\n");
Just4pLeisure 1:d5452e398b76 432 return FALSE;
Just4pLeisure 1:d5452e398b76 433 }
Just4pLeisure 1:d5452e398b76 434 address += 6;
Just4pLeisure 1:d5452e398b76 435 if (fwrite(RAMdata, 1, 6, fp) != 6) {
Just4pLeisure 1:d5452e398b76 436 fclose (fp);
Just4pLeisure 1:d5452e398b76 437 printf ("Error writing to the SRAM adaption file.\r\n");
Just4pLeisure 1:d5452e398b76 438 return FALSE;
Just4pLeisure 1:d5452e398b76 439 }
Just4pLeisure 1:d5452e398b76 440 }
Just4pLeisure 1:d5452e398b76 441 // There are a few more bytes to get because because the SRAM file is not an exact multiple of 6 bytes!
Just4pLeisure 1:d5452e398b76 442 // the % (modulo) mathematics function tells us how many bytes there are still to get
Just4pLeisure 1:d5452e398b76 443 if (!t5_can_read_data(RAMdata, (T5RAMSIZE - 1))) {
Just4pLeisure 1:d5452e398b76 444 fclose (fp);
Just4pLeisure 1:d5452e398b76 445 printf ("Error reading from the CAN bus.\r\n");
Just4pLeisure 1:d5452e398b76 446 return FALSE;
Just4pLeisure 1:d5452e398b76 447 }
Just4pLeisure 1:d5452e398b76 448 if (fwrite((RAMdata + 6 - (T5RAMSIZE % 6)), 1, (T5RAMSIZE % 6), fp) != (T5RAMSIZE % 6)) {
Just4pLeisure 1:d5452e398b76 449 fclose (fp);
Just4pLeisure 1:d5452e398b76 450 printf ("Error writing to the SRAM adaption file.\r\n");
Just4pLeisure 1:d5452e398b76 451 return FALSE;
Just4pLeisure 1:d5452e398b76 452 }
Just4pLeisure 1:d5452e398b76 453 fclose(fp);
Just4pLeisure 1:d5452e398b76 454 return TRUE;
Just4pLeisure 1:d5452e398b76 455 }
Just4pLeisure 1:d5452e398b76 456
Just4pLeisure 1:d5452e398b76 457 //
Just4pLeisure 1:d5452e398b76 458 // t5_can_send_boot_loader
Just4pLeisure 1:d5452e398b76 459 //
Just4pLeisure 1:d5452e398b76 460 // Sends a 'bootloader' file, booty.s19 to the T5 ECU.
Just4pLeisure 1:d5452e398b76 461 // The 'bootloader' is stored on the mbed 'local' file system 'disk' and must be in S19 format.
Just4pLeisure 1:d5452e398b76 462 //
Just4pLeisure 1:d5452e398b76 463 // The 'bootloader' is then able to dump or reFLASH the T5 ECU FLASH chips - this is the whole point of the exercise :-)
Just4pLeisure 1:d5452e398b76 464 //
Just4pLeisure 1:d5452e398b76 465 // Sending the 'bootloader' to the T5 ECU takes just over 1 second.
Just4pLeisure 1:d5452e398b76 466 //
Just4pLeisure 1:d5452e398b76 467 // inputs: none
Just4pLeisure 1:d5452e398b76 468 // return: bool TRUE if all went OK,
Just4pLeisure 1:d5452e398b76 469 // FALSE if the 'bootloader' wasn't sent for some reason.
Just4pLeisure 1:d5452e398b76 470 //
Just4pLeisure 1:d5452e398b76 471 bool t5_can_send_boot_loader() {
Just4pLeisure 1:d5452e398b76 472 printf("Starting the bootloader.\r\n");
Just4pLeisure 1:d5452e398b76 473 FILE *fp = fopen("/local/MyBooty.S19", "r"); // Open "booty.s19" on the local file system for reading
Just4pLeisure 1:d5452e398b76 474 if (!fp) {
Just4pLeisure 1:d5452e398b76 475 printf("Error: I could not find the bootloader file MyBooty.S19\r\n");
Just4pLeisure 1:d5452e398b76 476 return FALSE;
Just4pLeisure 1:d5452e398b76 477 }
Just4pLeisure 1:d5452e398b76 478 int c = 0; // for some reason fgetc returns an int instead of a char
Just4pLeisure 1:d5452e398b76 479 uint8_t count = 0; // count of bytes in the S-record can be 0xFF = 255 in decimal
Just4pLeisure 1:d5452e398b76 480 uint8_t asize = 0; // 2,3 or 4 bytes in address
Just4pLeisure 1:d5452e398b76 481 uint32_t address = 0; // address to put S-record
Just4pLeisure 1:d5452e398b76 482 uint8_t checksum = 0; // checksum check at the end of each S-record line
Just4pLeisure 1:d5452e398b76 483 char msg[8]; // Construct the bootloader frame for uploading
Just4pLeisure 1:d5452e398b76 484 bool sent = FALSE;
Just4pLeisure 1:d5452e398b76 485
Just4pLeisure 1:d5452e398b76 486 while (!sent) {
Just4pLeisure 1:d5452e398b76 487 // get characters until we get an 'S' (throws away \n,\r characters and other junk)
Just4pLeisure 1:d5452e398b76 488 do c = fgetc (fp);
Just4pLeisure 1:d5452e398b76 489 while (c != 'S' && c != EOF);
Just4pLeisure 1:d5452e398b76 490 // if (c == EOF) return '\a';
Just4pLeisure 1:d5452e398b76 491 c = fgetc(fp); // get the S-record type 1/2/3 5 7/8/9 (Return if EOF reached)
Just4pLeisure 1:d5452e398b76 492 // if ((c = fgetc(fp)) == EOF) return '\a'; // get the S-record type 1/2/3 5 7/8/9 (Return if EOF reached)
Just4pLeisure 1:d5452e398b76 493 switch (c) {
Just4pLeisure 1:d5452e398b76 494 case '0':
Just4pLeisure 1:d5452e398b76 495 break; // Skip over S0 header record
Just4pLeisure 1:d5452e398b76 496
Just4pLeisure 1:d5452e398b76 497 case '1':
Just4pLeisure 1:d5452e398b76 498 case '2':
Just4pLeisure 1:d5452e398b76 499 case '3':
Just4pLeisure 1:d5452e398b76 500 asize = 1 + c - '0'; // 2, 3 or 4 bytes for address
Just4pLeisure 1:d5452e398b76 501 address = 0;
Just4pLeisure 1:d5452e398b76 502 // get the number of bytes (in ascii format) in this S-record line
Just4pLeisure 1:d5452e398b76 503 // there must be at least the address and the checksum so return with an error if less than this!
Just4pLeisure 1:d5452e398b76 504 if ((c = SRecGetByte(fp)) < (asize + 1)) break;
Just4pLeisure 1:d5452e398b76 505 // if ((c = SRecGetByte(fp)) < 3) return '\a';
Just4pLeisure 1:d5452e398b76 506 count = c;
Just4pLeisure 1:d5452e398b76 507 checksum = c;
Just4pLeisure 1:d5452e398b76 508 // get the address
Just4pLeisure 1:d5452e398b76 509 for (uint8_t i=0; i<asize; i++) {
Just4pLeisure 1:d5452e398b76 510 c = SRecGetByte(fp);
Just4pLeisure 1:d5452e398b76 511 checksum += c;
Just4pLeisure 1:d5452e398b76 512 address <<= 8;
Just4pLeisure 1:d5452e398b76 513 address |= c;
Just4pLeisure 1:d5452e398b76 514 count--;
Just4pLeisure 1:d5452e398b76 515 }
Just4pLeisure 1:d5452e398b76 516 // send a bootloader address message
Just4pLeisure 1:d5452e398b76 517 if (!t5_can_send_boot_address(address, (count-1))) return FALSE;
Just4pLeisure 1:d5452e398b76 518 // get and send the bootloader frames for this S-record
Just4pLeisure 1:d5452e398b76 519 // NOTE the last frame sent may have less than 7 real data bytes but 7 bytes are always sent. In this case the unnecessary bytes
Just4pLeisure 1:d5452e398b76 520 // are repeated from the previous frame. This is OK because the T5 ECU knows how many bytes to expect (because the count of bytes
Just4pLeisure 1:d5452e398b76 521 // in the S-Record is sent with the upload address) and ignores any extra bytes in the last frame.
Just4pLeisure 1:d5452e398b76 522 for (uint8_t i=0; i<count-1; i++) {
Just4pLeisure 1:d5452e398b76 523 c = SRecGetByte(fp);
Just4pLeisure 1:d5452e398b76 524 checksum += c;
Just4pLeisure 1:d5452e398b76 525 msg[1+(i%7)] = c;
Just4pLeisure 1:d5452e398b76 526 if (i%7 == 0) msg[0]=i; // set the index number
Just4pLeisure 1:d5452e398b76 527 if ((i%7 == 6) || (i == count - 2))
Just4pLeisure 1:d5452e398b76 528 if (!t5_can_send_boot_frame(msg)) {
Just4pLeisure 1:d5452e398b76 529 fclose(fp);
Just4pLeisure 1:d5452e398b76 530 return FALSE;
Just4pLeisure 1:d5452e398b76 531 }
Just4pLeisure 1:d5452e398b76 532 }
Just4pLeisure 1:d5452e398b76 533 // get the checksum
Just4pLeisure 1:d5452e398b76 534 if ((checksum += SRecGetByte(fp)) != 0xFF) {
Just4pLeisure 1:d5452e398b76 535 printf("Error in S-record, checksum = %2x\r\n", checksum);
Just4pLeisure 1:d5452e398b76 536 fclose(fp);
Just4pLeisure 1:d5452e398b76 537 return FALSE;
Just4pLeisure 1:d5452e398b76 538 }
Just4pLeisure 1:d5452e398b76 539 break;
Just4pLeisure 1:d5452e398b76 540
Just4pLeisure 1:d5452e398b76 541 case '5':
Just4pLeisure 1:d5452e398b76 542 break; // Skip over S5 record types
Just4pLeisure 1:d5452e398b76 543
Just4pLeisure 1:d5452e398b76 544 case '7':
Just4pLeisure 1:d5452e398b76 545 case '8':
Just4pLeisure 1:d5452e398b76 546 case '9':
Just4pLeisure 1:d5452e398b76 547 asize = 11 - (c - '0'); // 2, 3 or 4 bytes for address
Just4pLeisure 1:d5452e398b76 548 // get the number of bytes (in ascii format) in this S-record line there must be just the address and the checksum
Just4pLeisure 1:d5452e398b76 549 // so return with an error if other than this!
Just4pLeisure 1:d5452e398b76 550 if ((c = SRecGetByte(fp)) != (asize + 1)) break;
Just4pLeisure 1:d5452e398b76 551 // if ((c = SRecGetByte(fp)) < 3) return '\a';
Just4pLeisure 1:d5452e398b76 552 checksum = c;
Just4pLeisure 1:d5452e398b76 553 // get the address
Just4pLeisure 1:d5452e398b76 554 for (uint8_t i=0; i<asize; i++) {
Just4pLeisure 1:d5452e398b76 555 c = SRecGetByte(fp);
Just4pLeisure 1:d5452e398b76 556 checksum += c;
Just4pLeisure 1:d5452e398b76 557 address <<= 8;
Just4pLeisure 1:d5452e398b76 558 address |= c;
Just4pLeisure 1:d5452e398b76 559 }
Just4pLeisure 1:d5452e398b76 560 // get the checksum
Just4pLeisure 1:d5452e398b76 561 if ((checksum += SRecGetByte(fp)) != 0xFF) {
Just4pLeisure 1:d5452e398b76 562 fclose(fp);
Just4pLeisure 1:d5452e398b76 563 printf("Error in S-record, checksum = %2x\r\n", checksum);
Just4pLeisure 1:d5452e398b76 564 return FALSE;
Just4pLeisure 1:d5452e398b76 565 }
Just4pLeisure 1:d5452e398b76 566 T5StartBootLoader(address);
Just4pLeisure 1:d5452e398b76 567 // T5WaitResponsePrint();
Just4pLeisure 1:d5452e398b76 568 sent = TRUE;
Just4pLeisure 1:d5452e398b76 569 break;
Just4pLeisure 1:d5452e398b76 570
Just4pLeisure 1:d5452e398b76 571 // Some kind of invalid S-record type so break
Just4pLeisure 1:d5452e398b76 572 default:
Just4pLeisure 1:d5452e398b76 573 fclose(fp);
Just4pLeisure 1:d5452e398b76 574 printf("oops - didn't recognise that S-Record \r\n");
Just4pLeisure 1:d5452e398b76 575 return FALSE;
Just4pLeisure 1:d5452e398b76 576 }
Just4pLeisure 1:d5452e398b76 577 }
Just4pLeisure 1:d5452e398b76 578 fclose(fp);
Just4pLeisure 1:d5452e398b76 579 return TRUE;
Just4pLeisure 1:d5452e398b76 580 }
Just4pLeisure 1:d5452e398b76 581
Just4pLeisure 1:d5452e398b76 582 //
Just4pLeisure 1:d5452e398b76 583 // t5_can_get_checksum
Just4pLeisure 1:d5452e398b76 584 //
Just4pLeisure 1:d5452e398b76 585 // Calculates the checksum of the FLASH in the T5 ECU.
Just4pLeisure 1:d5452e398b76 586 // The 'bootloader', booty.s19, must be loaded before this function can be used.
Just4pLeisure 1:d5452e398b76 587 // The 'bootloader' actually calculates the checksum and compares it with the
Just4pLeisure 1:d5452e398b76 588 // value stored in the 'header' region at the end of the FLASH.
Just4pLeisure 1:d5452e398b76 589 //
Just4pLeisure 1:d5452e398b76 590 // The bootloader sends a single CAN message with the result e.g.
Just4pLeisure 1:d5452e398b76 591 // w00C8C800CAFEBABE0808
Just4pLeisure 1:d5452e398b76 592 // 00C - T5 response messages have an CAN id of 00C
Just4pLeisure 1:d5452e398b76 593 // 8 - All T5 messages have a message length of 8 bytes
Just4pLeisure 1:d5452e398b76 594 // C8 - This is the checksum message type
Just4pLeisure 1:d5452e398b76 595 // 00 - 00 means OK, the checksum calculation matches the stored value which in this case is:
Just4pLeisure 1:d5452e398b76 596 // CAFEBABE - lol :-)
Just4pLeisure 1:d5452e398b76 597 //
Just4pLeisure 1:d5452e398b76 598 // w00C8C801FFFFFFFF0808
Just4pLeisure 1:d5452e398b76 599 // 01 - 01 means calculated value doesn't matched the stored value
Just4pLeisure 1:d5452e398b76 600 // FFFFFFFF - in this case the stored value is FFFFFFFF - the chips might be erased
Just4pLeisure 1:d5452e398b76 601 //
Just4pLeisure 1:d5452e398b76 602 // Calculating the checksum takes a little under 2 seconds.
Just4pLeisure 1:d5452e398b76 603 //
Just4pLeisure 1:d5452e398b76 604 // inputs: none
Just4pLeisure 1:d5452e398b76 605 // return: bool TRUE if all went OK,
Just4pLeisure 1:d5452e398b76 606 //
Just4pLeisure 1:d5452e398b76 607 bool t5_can_get_checksum() {
Just4pLeisure 1:d5452e398b76 608 uint32_t checksum = 0;
Just4pLeisure 1:d5452e398b76 609 if (!t5_boot_checksum_command(&checksum)) {
Just4pLeisure 1:d5452e398b76 610 printf("Error The ECU's checksum is wrong!\r\n");
Just4pLeisure 1:d5452e398b76 611 return FALSE;
Just4pLeisure 1:d5452e398b76 612 }
Just4pLeisure 1:d5452e398b76 613 printf("The FLASH checksum value is %#010x.\r\n", checksum);
Just4pLeisure 1:d5452e398b76 614 return TRUE;
Just4pLeisure 1:d5452e398b76 615 }
Just4pLeisure 1:d5452e398b76 616
Just4pLeisure 1:d5452e398b76 617 //
Just4pLeisure 1:d5452e398b76 618 // t5_can_bootloader_reset
Just4pLeisure 1:d5452e398b76 619 //
Just4pLeisure 1:d5452e398b76 620 // Exit the Bootloader and restart the T5 ECU
Just4pLeisure 1:d5452e398b76 621 //
Just4pLeisure 1:d5452e398b76 622 // inputs: none
Just4pLeisure 1:d5452e398b76 623 // outputs: bool TRUE if all went OK.
Just4pLeisure 1:d5452e398b76 624 //
Just4pLeisure 1:d5452e398b76 625 bool t5_can_bootloader_reset() {
Just4pLeisure 1:d5452e398b76 626 printf("Exiting the bootloader and restarting the T5 ECU.\r\n");
Just4pLeisure 1:d5452e398b76 627 if (!t5_boot_reset_command()) {
Just4pLeisure 1:d5452e398b76 628 printf("Error trying to reset the T5 ECU!\r\n");
Just4pLeisure 1:d5452e398b76 629 return FALSE;
Just4pLeisure 1:d5452e398b76 630 }
Just4pLeisure 1:d5452e398b76 631 return TRUE;
Just4pLeisure 1:d5452e398b76 632 }
Just4pLeisure 1:d5452e398b76 633
Just4pLeisure 1:d5452e398b76 634 //
Just4pLeisure 1:d5452e398b76 635 // t5_can_get_start_and_chip_types
Just4pLeisure 1:d5452e398b76 636 //
Just4pLeisure 1:d5452e398b76 637 // Gets the FLASH chip type fitted.
Just4pLeisure 1:d5452e398b76 638 //
Just4pLeisure 1:d5452e398b76 639 // NOTE the bootloader must be loaded in order to use this function.
Just4pLeisure 1:d5452e398b76 640 //
Just4pLeisure 1:d5452e398b76 641 // CAN messages from the T5 ECU with FLASH data look like this:
Just4pLeisure 1:d5452e398b76 642 //
Just4pLeisure 1:d5452e398b76 643 // C9,00,aa,aa,aa,aa,mm,dd,
Just4pLeisure 1:d5452e398b76 644 //
Just4pLeisure 1:d5452e398b76 645 // C9 lets us know its a FLASH id message
Just4pLeisure 1:d5452e398b76 646 //
Just4pLeisure 1:d5452e398b76 647 // aa,aa,aa,aa is the FLASH start address which we can use to work out if this is a T5.2 or T5.5 ECU
Just4pLeisure 1:d5452e398b76 648 // 0x00020000 - T5.2
Just4pLeisure 1:d5452e398b76 649 // 0x00040000 - T5.5
Just4pLeisure 1:d5452e398b76 650 //
Just4pLeisure 1:d5452e398b76 651 // mm = Manufacturer id. These can be:
Just4pLeisure 1:d5452e398b76 652 // 0x89 - Intel
Just4pLeisure 1:d5452e398b76 653 // 0x31 - CSI/CAT
Just4pLeisure 1:d5452e398b76 654 // 0x01 - AMD
Just4pLeisure 1:d5452e398b76 655 // 0x1F - Atmel
Just4pLeisure 1:d5452e398b76 656 //
Just4pLeisure 1:d5452e398b76 657 // dd = Device id. These can be:
Just4pLeisure 1:d5452e398b76 658 // 0xB8 - Intel _or_ CSI 28F512 (Fiited by Saab in T5.2)
Just4pLeisure 1:d5452e398b76 659 // 0xB4 - Intel _or_ CSI 28F010 (Fitted by Saab in T5.5)
Just4pLeisure 1:d5452e398b76 660 // 0x25 - AMD 28F512 (Fiited by Saab in T5.2)
Just4pLeisure 1:d5452e398b76 661 // 0xA7 - AMD 28F010 (Fitted by Saab in T5.5)
Just4pLeisure 1:d5452e398b76 662 // 0x20 - AMD 29F010 (Some people have put these in their T5.5)
Just4pLeisure 1:d5452e398b76 663 // 0x5D - Atmel 29C512 (Some people mave have put these in their T5.2)
Just4pLeisure 1:d5452e398b76 664 // 0xD5 - Atmel 29C010 (Some people have put these in their T5.5)
Just4pLeisure 1:d5452e398b76 665 //
Just4pLeisure 1:d5452e398b76 666 // mm = 0xFF, dd == 0xF7 probably means that the programming voltage isn't right.
Just4pLeisure 1:d5452e398b76 667 //
Just4pLeisure 1:d5452e398b76 668 // Finding out which ECU type and FLASH chips are fitted takes under a second.
Just4pLeisure 1:d5452e398b76 669 //
Just4pLeisure 1:d5452e398b76 670 // inputs: start T5 ecu start address
Just4pLeisure 1:d5452e398b76 671 // return: bool TRUE if all went OK.
Just4pLeisure 1:d5452e398b76 672 //
Just4pLeisure 1:d5452e398b76 673 bool t5_can_get_start_and_chip_types(uint32_t* start) {
Just4pLeisure 1:d5452e398b76 674 *start = 0;
Just4pLeisure 1:d5452e398b76 675 uint8_t make = 0;
Just4pLeisure 1:d5452e398b76 676 uint8_t type = 0;
Just4pLeisure 1:d5452e398b76 677 if (!t5_boot_get_flash_type(start, &make, &type)) {
Just4pLeisure 1:d5452e398b76 678 printf("Error trying to find out the ECU's first address and FLASH chip type!\r\n");
Just4pLeisure 1:d5452e398b76 679 return FALSE;
Just4pLeisure 1:d5452e398b76 680 }
Just4pLeisure 1:d5452e398b76 681 printf("This is a T5.%s ECU with ", ((*start == T52FLASHSTART) ? "2" : "5"));
Just4pLeisure 1:d5452e398b76 682 switch (make) {
Just4pLeisure 1:d5452e398b76 683 case AMD:
Just4pLeisure 1:d5452e398b76 684 printf("AMD ");
Just4pLeisure 1:d5452e398b76 685 break;
Just4pLeisure 1:d5452e398b76 686 case CSI:
Just4pLeisure 1:d5452e398b76 687 printf("CSI ");
Just4pLeisure 1:d5452e398b76 688 break;
Just4pLeisure 1:d5452e398b76 689 case INTEL:
Just4pLeisure 1:d5452e398b76 690 printf("INTEL ");
Just4pLeisure 1:d5452e398b76 691 break;
Just4pLeisure 1:d5452e398b76 692 default:
Just4pLeisure 1:d5452e398b76 693 printf("UNKNOWN FLASH chips - check pin65 has enough volts!\r\n");
Just4pLeisure 1:d5452e398b76 694 }
Just4pLeisure 1:d5452e398b76 695 switch (type) {
Just4pLeisure 1:d5452e398b76 696 case AMD28F512:
Just4pLeisure 1:d5452e398b76 697 case INTEL28F512:
Just4pLeisure 1:d5452e398b76 698 printf("28F512 FLASH chips.\r\n");
Just4pLeisure 1:d5452e398b76 699 break;
Just4pLeisure 1:d5452e398b76 700 case AMD28F010:
Just4pLeisure 1:d5452e398b76 701 case INTEL28F010:
Just4pLeisure 1:d5452e398b76 702 printf("28F010 FLASH chips.\r\n");
Just4pLeisure 1:d5452e398b76 703 break;
Just4pLeisure 1:d5452e398b76 704 case AMD29F010:
Just4pLeisure 1:d5452e398b76 705 printf("29F010 FLASH chips.\r\n");
Just4pLeisure 1:d5452e398b76 706 break;
Just4pLeisure 1:d5452e398b76 707 default:
Just4pLeisure 1:d5452e398b76 708 printf("UNKNOWN - check pin65 has enough volts!\r\n");
Just4pLeisure 1:d5452e398b76 709 return FALSE;
Just4pLeisure 1:d5452e398b76 710 }
Just4pLeisure 1:d5452e398b76 711 return TRUE;
Just4pLeisure 1:d5452e398b76 712 }
Just4pLeisure 1:d5452e398b76 713
Just4pLeisure 1:d5452e398b76 714 //
Just4pLeisure 1:d5452e398b76 715 // t5_can_erase_flash
Just4pLeisure 1:d5452e398b76 716 //
Just4pLeisure 1:d5452e398b76 717 // Erases the FLASH Chips.
Just4pLeisure 1:d5452e398b76 718 //
Just4pLeisure 1:d5452e398b76 719 // NOTE the bootloader must be loaded in order to use this function.
Just4pLeisure 1:d5452e398b76 720 //
Just4pLeisure 1:d5452e398b76 721 // CAN messages from the T5 ECU with FLASH erase command look like this:
Just4pLeisure 1:d5452e398b76 722 //
Just4pLeisure 1:d5452e398b76 723 // C0,cc,08,08,08,08,08,08
Just4pLeisure 1:d5452e398b76 724 //
Just4pLeisure 1:d5452e398b76 725 // C0 tells us this is a response to the FLASH erase command.
Just4pLeisure 1:d5452e398b76 726 //
Just4pLeisure 1:d5452e398b76 727 // cc is a code that tells us what happened:
Just4pLeisure 1:d5452e398b76 728 // 00 - FLASH was erased OK
Just4pLeisure 1:d5452e398b76 729 // 01 - Could not erase FLASH chips to 0xFF
Just4pLeisure 1:d5452e398b76 730 // 02 - Could not write 0x00 to 28F FLASH chips
Just4pLeisure 1:d5452e398b76 731 // 03 - Unrecognised FLASH chip type (or maybe programming voltage isn't right)
Just4pLeisure 1:d5452e398b76 732 // 04 - Intel chips found, but unrecognised type
Just4pLeisure 1:d5452e398b76 733 // 05 - AMD chips found, but unrecognised type
Just4pLeisure 1:d5452e398b76 734 // 06 - CSI/Catalyst chips found, but unrecognised type
Just4pLeisure 1:d5452e398b76 735 // 07 - Atmel chips found - Atmel chips don't need to be erased
Just4pLeisure 1:d5452e398b76 736 //
Just4pLeisure 1:d5452e398b76 737 // Erasing 28F type FLASH chips takes around 22 seconds. 29F chips take around 4 seconds.
Just4pLeisure 1:d5452e398b76 738 //
Just4pLeisure 1:d5452e398b76 739 // inputs: none
Just4pLeisure 1:d5452e398b76 740 // return: bool TRUE if all went OK.
Just4pLeisure 1:d5452e398b76 741 //
Just4pLeisure 1:d5452e398b76 742 bool t5_can_erase_flash() {
Just4pLeisure 1:d5452e398b76 743 printf("Erasing the FLASH chips.\r\n");
Just4pLeisure 1:d5452e398b76 744 if (!t5_boot_erase_command()) {
Just4pLeisure 1:d5452e398b76 745 printf("Error The ECU's FLASH has not been erased!\r\n");
Just4pLeisure 1:d5452e398b76 746 return FALSE;
Just4pLeisure 1:d5452e398b76 747 }
Just4pLeisure 1:d5452e398b76 748 return TRUE;
Just4pLeisure 1:d5452e398b76 749 }
Just4pLeisure 1:d5452e398b76 750
Just4pLeisure 1:d5452e398b76 751 //
Just4pLeisure 1:d5452e398b76 752 // t5_can_dump_flash
Just4pLeisure 1:d5452e398b76 753 //
Just4pLeisure 1:d5452e398b76 754 // Dumps the FLASH chip BIN file, original.bin to the mbed 'disk'
Just4pLeisure 1:d5452e398b76 755 //
Just4pLeisure 1:d5452e398b76 756 // NOTE the bootloader must be loaded in order to use this function.
Just4pLeisure 1:d5452e398b76 757 //
Just4pLeisure 1:d5452e398b76 758 // Dumping FLASH chips in a T5.5 ECU takes around 35 seconds.
Just4pLeisure 1:d5452e398b76 759 // Dumping T5.2 ECUs should take about half of this time
Just4pLeisure 1:d5452e398b76 760 //
Just4pLeisure 1:d5452e398b76 761 // inputs: start start address of the T5.x FLASH
Just4pLeisure 1:d5452e398b76 762
Just4pLeisure 1:d5452e398b76 763 // return: bool TRUE if all went OK, FALSE if there was an error.
Just4pLeisure 1:d5452e398b76 764 //
Just4pLeisure 1:d5452e398b76 765 bool t5_can_dump_flash(uint32_t start) {
Just4pLeisure 1:d5452e398b76 766 printf("Saving the original FLASH BIN file.\r\n");
Just4pLeisure 1:d5452e398b76 767 FILE *fp = fopen("/local/original.bin", "w"); // Open "original.bin" on the local file system for writing
Just4pLeisure 1:d5452e398b76 768 if (!fp) {
Just4pLeisure 1:d5452e398b76 769 perror ("The following error occured");
Just4pLeisure 1:d5452e398b76 770 return FALSE;
Just4pLeisure 1:d5452e398b76 771 }
Just4pLeisure 1:d5452e398b76 772 uint32_t address = start + 5; // Mysterious reason for starting at 5 !!!
Just4pLeisure 1:d5452e398b76 773 char FLASHdata[6];
Just4pLeisure 1:d5452e398b76 774 while (address < TRIONICLASTADDR) {
Just4pLeisure 1:d5452e398b76 775 if (!t5_can_read_data(FLASHdata, address)) {
Just4pLeisure 1:d5452e398b76 776 fclose (fp);
Just4pLeisure 1:d5452e398b76 777 printf ("Error reading from the CAN bus.\r\n");
Just4pLeisure 1:d5452e398b76 778 return FALSE;
Just4pLeisure 1:d5452e398b76 779 }
Just4pLeisure 1:d5452e398b76 780 address += 6;
Just4pLeisure 1:d5452e398b76 781 if (fwrite(FLASHdata, 1, 6, fp) != 6) {
Just4pLeisure 1:d5452e398b76 782 fclose (fp);
Just4pLeisure 1:d5452e398b76 783 printf ("Error writing to the FLASH BIN file.\r\n");
Just4pLeisure 1:d5452e398b76 784 return FALSE;
Just4pLeisure 1:d5452e398b76 785 }
Just4pLeisure 1:d5452e398b76 786 }
Just4pLeisure 1:d5452e398b76 787 // There are a few more bytes to get because because the bin file is not an exact multiple of 6 bytes!
Just4pLeisure 1:d5452e398b76 788 // the % (modulo) mathematics function tells us how many bytes there are still to get
Just4pLeisure 1:d5452e398b76 789 if (!t5_can_read_data(FLASHdata, (TRIONICLASTADDR))) {
Just4pLeisure 1:d5452e398b76 790 fclose (fp);
Just4pLeisure 1:d5452e398b76 791 printf ("Error reading from the CAN bus.\r\n");
Just4pLeisure 1:d5452e398b76 792 return FALSE;
Just4pLeisure 1:d5452e398b76 793 }
Just4pLeisure 1:d5452e398b76 794 if (fwrite((FLASHdata + 6 - ((TRIONICLASTADDR - start +1) % 6)), 1, ((TRIONICLASTADDR - start +1) % 6), fp) != ((TRIONICLASTADDR - start +1) % 6)) {
Just4pLeisure 1:d5452e398b76 795 fclose (fp);
Just4pLeisure 1:d5452e398b76 796 printf ("Error writing to the FLASH BIN file.\r\n");
Just4pLeisure 1:d5452e398b76 797 return FALSE;
Just4pLeisure 1:d5452e398b76 798 }
Just4pLeisure 1:d5452e398b76 799 fclose(fp);
Just4pLeisure 1:d5452e398b76 800 return TRUE;
Just4pLeisure 1:d5452e398b76 801 }
Just4pLeisure 1:d5452e398b76 802
Just4pLeisure 1:d5452e398b76 803
Just4pLeisure 1:d5452e398b76 804 //
Just4pLeisure 1:d5452e398b76 805 // t5_can_send_flash_bin_update
Just4pLeisure 1:d5452e398b76 806 //
Just4pLeisure 1:d5452e398b76 807 // Sends a FLASH update file, modified.hex to the T5 ECU.
Just4pLeisure 1:d5452e398b76 808 // The FLASH update file is stored on the local file system and must be in hex format.
Just4pLeisure 1:d5452e398b76 809 //
Just4pLeisure 1:d5452e398b76 810 // FLASHing a T5.5 ECU takes around 40 seconds. FLASHing T5.2 ECUs should take about half of this time
Just4pLeisure 1:d5452e398b76 811 //
Just4pLeisure 1:d5452e398b76 812 // inputs: start start address of the T5.x FLASH
Just4pLeisure 1:d5452e398b76 813
Just4pLeisure 1:d5452e398b76 814 // return: bool TRUE if all went OK,
Just4pLeisure 1:d5452e398b76 815 // FALSE if the FLASH update failed for some reason.
Just4pLeisure 1:d5452e398b76 816 //
Just4pLeisure 1:d5452e398b76 817 bool t5_can_send_flash_bin_update(uint32_t start) {
Just4pLeisure 1:d5452e398b76 818 printf("Programming the FLASH chips.\r\n");
Just4pLeisure 1:d5452e398b76 819 FILE *fp = fopen("/local/modified.hex", "r"); // Open "modified.s19" on the local file system for reading
Just4pLeisure 1:d5452e398b76 820 if (!fp) {
Just4pLeisure 1:d5452e398b76 821 printf("Error: I could not find the BIN file MODIFIED.HEX\r\n");
Just4pLeisure 1:d5452e398b76 822 return FALSE;
Just4pLeisure 1:d5452e398b76 823 }
Just4pLeisure 1:d5452e398b76 824
Just4pLeisure 1:d5452e398b76 825 // obtain file size - it should match the size of the FLASH chips:
Just4pLeisure 1:d5452e398b76 826 fseek (fp , 0 , SEEK_END);
Just4pLeisure 1:d5452e398b76 827 uint32_t file_size = ftell (fp);
Just4pLeisure 1:d5452e398b76 828 rewind (fp);
Just4pLeisure 1:d5452e398b76 829
Just4pLeisure 1:d5452e398b76 830 // read the initial stack pointer value in the BIN file - it should match the value expected for the type of ECU
Just4pLeisure 1:d5452e398b76 831 uint8_t stack_byte = 0;
Just4pLeisure 1:d5452e398b76 832 uint32_t stack_long = 0;
Just4pLeisure 1:d5452e398b76 833 if (!fread(&stack_byte,1,1,fp)) return TERM_ERR;
Just4pLeisure 1:d5452e398b76 834 stack_long |= (stack_byte << 24);
Just4pLeisure 1:d5452e398b76 835 if (!fread(&stack_byte,1,1,fp)) return TERM_ERR;
Just4pLeisure 1:d5452e398b76 836 stack_long |= (stack_byte << 16);
Just4pLeisure 1:d5452e398b76 837 if (!fread(&stack_byte,1,1,fp)) return TERM_ERR;
Just4pLeisure 1:d5452e398b76 838 stack_long |= (stack_byte << 8);
Just4pLeisure 1:d5452e398b76 839 if (!fread(&stack_byte,1,1,fp)) return TERM_ERR;
Just4pLeisure 1:d5452e398b76 840 stack_long |= stack_byte;
Just4pLeisure 1:d5452e398b76 841 rewind (fp);
Just4pLeisure 1:d5452e398b76 842
Just4pLeisure 1:d5452e398b76 843 if (start == T52FLASHSTART && (file_size != T52FLASHSIZE || stack_long != T5POINTER)) {
Just4pLeisure 1:d5452e398b76 844 fclose(fp);
Just4pLeisure 1:d5452e398b76 845 printf("The BIN file does not appear to be for a T5.2 ECU :-(\r\n");
Just4pLeisure 1:d5452e398b76 846 printf("BIN file size: %#10x, FLASH chip size: %#010x, Pointer: %#10x.\r\n", file_size, T52FLASHSIZE, stack_long);
Just4pLeisure 1:d5452e398b76 847 return TERM_ERR;
Just4pLeisure 1:d5452e398b76 848 }
Just4pLeisure 1:d5452e398b76 849 if (start == T55FLASHSTART && (file_size != T55FLASHSIZE || stack_long != T5POINTER)) {
Just4pLeisure 1:d5452e398b76 850 fclose(fp);
Just4pLeisure 1:d5452e398b76 851 printf("The BIN file does not appear to be for a T5.5 ECU :-(\r\n");
Just4pLeisure 1:d5452e398b76 852 printf("BIN file size: %#10x, FLASH chip size: %#010x, Pointer: %#10x.\r\n", file_size, T55FLASHSIZE, stack_long);
Just4pLeisure 1:d5452e398b76 853 return TERM_ERR;
Just4pLeisure 1:d5452e398b76 854 }
Just4pLeisure 1:d5452e398b76 855
Just4pLeisure 1:d5452e398b76 856 char msg[8]; // Construct the bootloader frame for uploading
Just4pLeisure 1:d5452e398b76 857 uint32_t curr_addr = start; // address to put FLASH data
Just4pLeisure 1:d5452e398b76 858 uint8_t byte_value = 0;
Just4pLeisure 1:d5452e398b76 859
Just4pLeisure 1:d5452e398b76 860 while (curr_addr <= TRIONICLASTADDR) {
Just4pLeisure 1:d5452e398b76 861
Just4pLeisure 1:d5452e398b76 862 // send a bootloader address message
Just4pLeisure 1:d5452e398b76 863 if (!t5_can_send_boot_address(curr_addr, 0x80)) {
Just4pLeisure 1:d5452e398b76 864 fclose(fp);
Just4pLeisure 1:d5452e398b76 865 printf("Error sending CAN message");
Just4pLeisure 1:d5452e398b76 866 return FALSE;
Just4pLeisure 1:d5452e398b76 867 }
Just4pLeisure 1:d5452e398b76 868 curr_addr += 0x80;
Just4pLeisure 1:d5452e398b76 869 // Construct and send the bootloader frames
Just4pLeisure 1:d5452e398b76 870 // NOTE the last frame sent may have less than 7 real data bytes but 7 bytes are always sent. In this case the unnecessary bytes
Just4pLeisure 1:d5452e398b76 871 // are repeated from the previous frame. This is OK because the T5 ECU knows how many bytes to expect (because the count of bytes
Just4pLeisure 1:d5452e398b76 872 // in the S-Record is sent with the upload address) and ignores any extra bytes in the last frame.
Just4pLeisure 1:d5452e398b76 873 for (uint8_t i=0; i<0x80; i++) {
Just4pLeisure 1:d5452e398b76 874 if (!fread(&byte_value,1,1,fp)) {
Just4pLeisure 1:d5452e398b76 875 fclose(fp);
Just4pLeisure 1:d5452e398b76 876 printf("Error reading the BIN file MODIFIED.HEX");
Just4pLeisure 1:d5452e398b76 877 return FALSE;
Just4pLeisure 1:d5452e398b76 878 }
Just4pLeisure 1:d5452e398b76 879 msg[1+(i%7)] = byte_value;
Just4pLeisure 1:d5452e398b76 880 if (i%7 == 0) msg[0]=i; // set the index number
Just4pLeisure 1:d5452e398b76 881 if ((i%7 == 6) || (i == 0x80 - 1))
Just4pLeisure 1:d5452e398b76 882 if (!t5_can_send_boot_frame(msg)) {
Just4pLeisure 1:d5452e398b76 883 fclose(fp);
Just4pLeisure 1:d5452e398b76 884 printf("Error sending CAN message");
Just4pLeisure 1:d5452e398b76 885 return FALSE;
Just4pLeisure 1:d5452e398b76 886 }
Just4pLeisure 1:d5452e398b76 887 }
Just4pLeisure 1:d5452e398b76 888 }
Just4pLeisure 1:d5452e398b76 889 fclose(fp);
Just4pLeisure 1:d5452e398b76 890 return TRUE;
Just4pLeisure 1:d5452e398b76 891 }
Just4pLeisure 1:d5452e398b76 892
Just4pLeisure 1:d5452e398b76 893 //
Just4pLeisure 1:d5452e398b76 894 // t5_can_send_flash_s19_update
Just4pLeisure 1:d5452e398b76 895 //
Just4pLeisure 1:d5452e398b76 896 // Sends a FLASH update file, modified.s19 to the T5 ECU.
Just4pLeisure 1:d5452e398b76 897 // The FLASH update file is stored on the local file system and must be in S19 format.
Just4pLeisure 1:d5452e398b76 898 //
Just4pLeisure 1:d5452e398b76 899 // FLASHing a T5.5 ECU takes around 60 seconds. FLASHing T5.2 ECUs should take about half of this time
Just4pLeisure 1:d5452e398b76 900 //
Just4pLeisure 1:d5452e398b76 901 // inputs: start start address of the T5.x FLASH
Just4pLeisure 1:d5452e398b76 902
Just4pLeisure 1:d5452e398b76 903 // return: bool TRUE if all went OK,
Just4pLeisure 1:d5452e398b76 904 // FALSE if the FLASH update failed for some reason.
Just4pLeisure 1:d5452e398b76 905 //
Just4pLeisure 1:d5452e398b76 906 bool t5_can_send_flash_s19_update(uint32_t start) {
Just4pLeisure 1:d5452e398b76 907 printf("Programming the FLASH chips.\r\n");
Just4pLeisure 1:d5452e398b76 908 FILE *fp = fopen("/local/modified.s19", "r"); // Open "modified.s19" on the local file system for reading
Just4pLeisure 1:d5452e398b76 909 if (!fp) {
Just4pLeisure 1:d5452e398b76 910 printf("Error: I could not find the BIN file MODIFIED.S19\r\n");
Just4pLeisure 1:d5452e398b76 911 return FALSE;
Just4pLeisure 1:d5452e398b76 912 }
Just4pLeisure 1:d5452e398b76 913 int c = 0; // for some reason fgetc returns an int instead of a char
Just4pLeisure 1:d5452e398b76 914 uint8_t count = 0; // count of bytes in the S-record can be 0xFF = 255 in decimal
Just4pLeisure 1:d5452e398b76 915 uint8_t asize = 0; // 2,3 or 4 bytes in address
Just4pLeisure 1:d5452e398b76 916 uint32_t address = 0; // address to put S-record
Just4pLeisure 1:d5452e398b76 917 uint8_t checksum = 0; // checksum check at the end
Just4pLeisure 1:d5452e398b76 918 char msg[8]; // Construct the bootloader frame for uploading
Just4pLeisure 1:d5452e398b76 919 bool sent = FALSE;
Just4pLeisure 1:d5452e398b76 920
Just4pLeisure 1:d5452e398b76 921 while (!sent) {
Just4pLeisure 1:d5452e398b76 922
Just4pLeisure 1:d5452e398b76 923 do c = fgetc (fp); // get characters until we get an 'S' (throws away \n,\r characters and other junk)
Just4pLeisure 1:d5452e398b76 924 while (c != 'S' && c != EOF);
Just4pLeisure 1:d5452e398b76 925 // if (c == EOF) return '\a';
Just4pLeisure 1:d5452e398b76 926 c = fgetc(fp); // get the S-record type 1/2/3 5 7/8/9 (Return if EOF reached)
Just4pLeisure 1:d5452e398b76 927 // if ((c = fgetc(fp)) == EOF) return '\a'; // get the S-record type 1/2/3 5 7/8/9 (Return if EOF reached)
Just4pLeisure 1:d5452e398b76 928 switch (c) {
Just4pLeisure 1:d5452e398b76 929 case '0':
Just4pLeisure 1:d5452e398b76 930 break; // Skip over S0 header record
Just4pLeisure 1:d5452e398b76 931
Just4pLeisure 1:d5452e398b76 932 case '1':
Just4pLeisure 1:d5452e398b76 933 case '2':
Just4pLeisure 1:d5452e398b76 934 case '3':
Just4pLeisure 1:d5452e398b76 935 asize = 1 + c - '0'; // 2, 3 or 4 bytes for address
Just4pLeisure 1:d5452e398b76 936 address = 0;
Just4pLeisure 1:d5452e398b76 937 // get the number of bytes (in ascii format) in this S-record line
Just4pLeisure 1:d5452e398b76 938 // there must be at least the address and the checksum so return with an error if less than this!
Just4pLeisure 1:d5452e398b76 939 if ((c = SRecGetByte(fp)) < (asize + 1)) {
Just4pLeisure 1:d5452e398b76 940 fclose(fp);
Just4pLeisure 1:d5452e398b76 941 printf("Error in S-record address");
Just4pLeisure 1:d5452e398b76 942 return FALSE;
Just4pLeisure 1:d5452e398b76 943 }
Just4pLeisure 1:d5452e398b76 944 count = c;
Just4pLeisure 1:d5452e398b76 945 checksum = c;
Just4pLeisure 1:d5452e398b76 946 // get the address
Just4pLeisure 1:d5452e398b76 947 for (uint8_t i=0; i<asize; i++) {
Just4pLeisure 1:d5452e398b76 948 c = SRecGetByte(fp);
Just4pLeisure 1:d5452e398b76 949 checksum += c;
Just4pLeisure 1:d5452e398b76 950 address <<= 8;
Just4pLeisure 1:d5452e398b76 951 address |= c;
Just4pLeisure 1:d5452e398b76 952 count--;
Just4pLeisure 1:d5452e398b76 953 }
Just4pLeisure 1:d5452e398b76 954 // send a bootloader address message - Adding the start address that was supplied (for T5.2/T5.5)
Just4pLeisure 1:d5452e398b76 955 if (!t5_can_send_boot_address((address + start), (count - 1))) {
Just4pLeisure 1:d5452e398b76 956 fclose(fp);
Just4pLeisure 1:d5452e398b76 957 printf("Error sending CAN message");
Just4pLeisure 1:d5452e398b76 958 return FALSE;
Just4pLeisure 1:d5452e398b76 959 }
Just4pLeisure 1:d5452e398b76 960 // get and send the bootloader frames for this S-record
Just4pLeisure 1:d5452e398b76 961 // NOTE the last frame sent may have less than 7 real data bytes but 7 bytes are always sent. In this case the unnecessary bytes
Just4pLeisure 1:d5452e398b76 962 // are repeated from the previous frame. This is OK because the T5 ECU knows how many bytes to expect (because the count of bytes
Just4pLeisure 1:d5452e398b76 963 // in the S-Record is sent with the upload address) and ignores any extra bytes in the last frame.
Just4pLeisure 1:d5452e398b76 964 for (uint8_t i=0; i<count-1; i++) {
Just4pLeisure 1:d5452e398b76 965 c = SRecGetByte(fp);
Just4pLeisure 1:d5452e398b76 966 checksum += c;
Just4pLeisure 1:d5452e398b76 967 msg[1+(i%7)] = c;
Just4pLeisure 1:d5452e398b76 968 if (i%7 == 0) msg[0]=i; // set the index number
Just4pLeisure 1:d5452e398b76 969 if ((i%7 == 6) || (i == count - 2))
Just4pLeisure 1:d5452e398b76 970 if (!t5_can_send_boot_frame(msg)) {
Just4pLeisure 1:d5452e398b76 971 fclose(fp);
Just4pLeisure 1:d5452e398b76 972 printf("Error sending CAN message");
Just4pLeisure 1:d5452e398b76 973 return FALSE;
Just4pLeisure 1:d5452e398b76 974 }
Just4pLeisure 1:d5452e398b76 975 }
Just4pLeisure 1:d5452e398b76 976 // get the checksum
Just4pLeisure 1:d5452e398b76 977 if ((checksum += SRecGetByte(fp)) != 0xFF) {
Just4pLeisure 1:d5452e398b76 978 fclose(fp);
Just4pLeisure 1:d5452e398b76 979 printf("Error in S-record, checksum = %2x\r\n", checksum);
Just4pLeisure 1:d5452e398b76 980 return FALSE;
Just4pLeisure 1:d5452e398b76 981 }
Just4pLeisure 1:d5452e398b76 982 break;
Just4pLeisure 1:d5452e398b76 983
Just4pLeisure 1:d5452e398b76 984 case '5':
Just4pLeisure 1:d5452e398b76 985 break; // Skip over S5 record types
Just4pLeisure 1:d5452e398b76 986
Just4pLeisure 1:d5452e398b76 987 case '7':
Just4pLeisure 1:d5452e398b76 988 case '8':
Just4pLeisure 1:d5452e398b76 989 case '9':
Just4pLeisure 1:d5452e398b76 990 sent = TRUE;
Just4pLeisure 1:d5452e398b76 991 break;
Just4pLeisure 1:d5452e398b76 992
Just4pLeisure 1:d5452e398b76 993 // Some kind of invalid S-record type so break
Just4pLeisure 1:d5452e398b76 994 default:
Just4pLeisure 1:d5452e398b76 995 printf("oops - didn't recognise that S-Record\r\n");
Just4pLeisure 1:d5452e398b76 996 fclose(fp);
Just4pLeisure 1:d5452e398b76 997 return FALSE;
Just4pLeisure 1:d5452e398b76 998 }
Just4pLeisure 1:d5452e398b76 999 }
Just4pLeisure 1:d5452e398b76 1000 fclose(fp);
Just4pLeisure 1:d5452e398b76 1001 return TRUE;
Just4pLeisure 1:d5452e398b76 1002 }
Just4pLeisure 1:d5452e398b76 1003
Just4pLeisure 1:d5452e398b76 1004 //
Just4pLeisure 1:d5452e398b76 1005 // t5_can_get_last_address
Just4pLeisure 1:d5452e398b76 1006 //
Just4pLeisure 1:d5452e398b76 1007 // Sends a C3 Message to the T5 ECU. The reply should contain the last used FLASH address
Just4pLeisure 1:d5452e398b76 1008 // which is always 0x0007FFFF
Just4pLeisure 1:d5452e398b76 1009 //
Just4pLeisure 1:d5452e398b76 1010 // The last 2 bytes of the message might be useful to work out whether or not the bootloader
Just4pLeisure 1:d5452e398b76 1011 // has been loaded. The 'mode' value will be 0x0808 when the bootloader is running or 0x89b8
Just4pLeisure 1:d5452e398b76 1012 // when it isn't.
Just4pLeisure 1:d5452e398b76 1013 //
Just4pLeisure 1:d5452e398b76 1014 // inputs: none
Just4pLeisure 1:d5452e398b76 1015 // return: bool TRUE if all went OK,
Just4pLeisure 1:d5452e398b76 1016 //
Just4pLeisure 1:d5452e398b76 1017 bool t5_can_get_last_address() {
Just4pLeisure 1:d5452e398b76 1018 uint32_t last_address = 0;
Just4pLeisure 1:d5452e398b76 1019 uint16_t mode = 0;
Just4pLeisure 1:d5452e398b76 1020 if (!t5_boot_c3_command(&last_address, &mode)) {
Just4pLeisure 1:d5452e398b76 1021 printf("Error trying to find out the ECU's last address and mode!\r\n");
Just4pLeisure 1:d5452e398b76 1022 return FALSE;
Just4pLeisure 1:d5452e398b76 1023 }
Just4pLeisure 1:d5452e398b76 1024 printf("The Last used FLASH address is: %#010x, mode %#06x\r\n", last_address, mode);
Just4pLeisure 1:d5452e398b76 1025 return TRUE;
Just4pLeisure 1:d5452e398b76 1026 }