Jump to content
  • Sign up for FREE! Become a GM-Trucks.com Member Today!

    In 20 seconds you can become part of the worlds largest and oldest community discussing General Motors, Chevrolet and GMC branded pickups, crossovers, and SUVs. From buying research to owner support, join 1.5 MILLION GM Truck Enthusiasts every month who use GM-Trucks.com as a daily part of their ownership experience. 

Recommended Posts

This will be a development thread on breaking and modifying the MyLink software.

 

Some of the software is available now, I'm going to pester Delphi for a release of the 2014 libraries.

 

If anybody would like to collaborate, here's some of what's available. I'll update this post with new info as its available.

 

http://oss.bosch-cm.com/gm.html

 

http://delphi.com/open-source/

  • Like 2

Share this post


Link to post
Share on other sites

I read about the 2013 sonic/spark mylink updates. At first I was under the impression that radio updates needed to be done with a Tech2 tool. However I read that PI0941 details an update via USB flash drive, this is good news as we wouldn't need to JTag or develop hardware to make changes.

 

Now we need to get the update files for our radios to break them down. Appearently Delphi hosts the TIS2web service where the files reside.

 

Info

http://sandyblogs.com/techlink/?p=1668

Edited by OhmMega

Share this post


Link to post
Share on other sites

No luck on obtaining the update files yet. I'm investigating the options to hack the mylink hardware. Hoping I can find a UART debug console but it'll take time as I'm a novice to embedded hardware/software.

 

Here are some images of the computer. I haven't found any info on what arm CPU is being used.

 

 

post-124606-0-53988600-1383371360_thumb.jpg

post-124606-0-55209100-1383371392_thumb.jpg

post-124606-0-04374600-1383371409_thumb.jpg

post-124606-0-53988600-1383371360_thumb.jpg

post-124606-0-55209100-1383371392_thumb.jpg

post-124606-0-04374600-1383371409_thumb.jpg

post-124606-0-53988600-1383371360_thumb.jpg

post-124606-0-55209100-1383371392_thumb.jpg

post-124606-0-04374600-1383371409_thumb.jpg

post-124606-0-53988600-1383371360_thumb.jpg

post-124606-0-55209100-1383371392_thumb.jpg

post-124606-0-04374600-1383371409_thumb.jpg

Share this post


Link to post
Share on other sites

Not at all the same. The Silverado, impala, and some Cadillacs use a Bosch system. The Panasonic's can be found in the camaro, cruze, sonic, SS....

 

Different hardware and software.

 

The gm developers is a gimmick to help gm sales. Basically you or I can create an app, send it to gm for approval, and they market it as a perk for their vehicles.

 

The point here is to change the OS. Either to modify the current setup or to maybe android or something well designed for a mobile user interface.

 

I've also teased the idea of replacing the HMI with a raspberry pi. There are a few obsticals like the display runs off fpd-link and I'd have to compile a database of CAN messages.

Share this post


Link to post
Share on other sites

Subscribed, as an interested embedded systems engineer...

  • Like 1

Share this post


Link to post
Share on other sites

Chris White (The GTPprix guy) would probably be a great resource as he's already cataloged a lot of the process for himself, but I highly doubt he would be willing to share his secrets...

  • Like 1

Share this post


Link to post
Share on other sites

Does anyone know on the process of obtaining a setup for this tool?

http://sandyblogs.com/techlink/?p=3832

EDIT: I answered my own question. It's INSANELY expensive, easily just under $3k for the first year for the Bosch MDI tool + Tis2WEB subscription. That's absurd.

Edited by szalkerous

Share this post


Link to post
Share on other sites

This is my winter project while I have down time.

 

I received a can bus shield for arduino compatible dev boards. Ill have it setup to record the messages going to the HMI module.

 

Once I compile a database of messages I'll start on implementing something like a pcduino/hummingboard/udoo... Then I'll have some work connecting and programming:

 

Can Bus

Vehicle telematics

Steering wheel controls

HVAC integration

Instrument cluster

Microphone

Display

4ch audio volume control

Rear cam

Bluetooth

 

This will all run in Android.

  • Like 1

Share this post


Link to post
Share on other sites

I'm making up some new diagrams for the HMI Module.

 

Here's a text reference for the terminations until the images are finished.

 

Human Machine Interface Control Module NG 2.0

Gray plug [X2]

pin - color/stripe - description

01 - White/Violet - 12v+

02 - White/Green - MOST data

03 - Gray/Violet - MOST data

04 - na

05 - Gray/Yellow - unknown

06 - White/Blue - unknown

07 - na

08 - Gray/Violet - MOST data

09 - White/Green - MOST data

10 - na

11 - na

12 - na

 

Black plug [X1]

pin - color/stripe - description

01 - Gray/Yellow - Mic+

02 - Black/Gray - Mic-

03 - na

04 - na

05 - White/Blue - unknown

06 - na

07 - Red/Violet - 12v+ Battery

08 - Black - 0v (ground)

09 - Green/White - LIN data

10 - na

11 - Blue - CAN H

12 - White - CAN L

13 - Blue - CAN H

14 - White - CAN L

15 - na

16 - na

 

The CAN bus is jumped through in the module. I'm not sure what side is in and what side is out yet until i meter the wires.

The MOST bus is intriguing as it is an A/V bus connected through the HMI, Instrument Cluster, DISC Player, Display, Amplifier(if applicable) and Radio. MOST bus is also jumped through in the module.

The LIN bus I think hits the buttons like steering wheel, hvac controls, media controls...

 

I'm still investigating the system setup to further evaluate the next move, rather breaking the HMI software and reusing the hardware, or building a new bit of hardware. My only issue is a MOST controller is nearly impossible to come by. Although there are some aftermarket MOST integration products for foreign cars.

The HMI is actually pretty decent at a glance, it has 8Gb DDR3 Ram, 32Gb eMMC, LIN, CAN, MOST50, Accelerometer, BT/Wifi, GPS.

 

I'm may start finding someone with one of the nav map updates to see if they'll share the files. It may have some insight into the update process and maybe an easy way into the software. Otherwise steps will have to be taken to try and read the eMMC memory.

 

More to come...

Edited by OhmMega
  • Like 2

Share this post


Link to post
Share on other sites

I just picked up a 2015 Colorado and am keen to do more with this unit. These were supposed to ship with GM's "AppShop" but that got delayed/scrubbed and who knows if they're ever going to ship it.

 

The systems are all QNX based. I'm trying to obtain the QNX SDK and going to see if they left debugging or something enabled (unlikely). I ran a port scan against the WiFi and there's nothing open at all. The unit lets me save the system info to a flash drive but it just dumps a mostly meaningless XML file...

  <module>    <modulename>HMIModule</modulename>    <manifestfilepartnum>7515400214</manifestfilepartnum>    <lastmanifeststatus>pass</lastmanifeststatus>    <basemodelpartnum>23493430</basemodelpartnum>    <endmodelpartnum>23493430</endmodelpartnum>    <swparts>      <modid>19</modid>      <swpartnum>23493441</swpartnum>    </swparts>    <swparts>      <modid>19</modid>      <swpartnum>23493441</swpartnum>    </swparts>    <swparts>      <modid>19</modid>      <swpartnum>10000002</swpartnum>    </swparts>    <swparts>      <modid>0</modid>      <swpartnum>23432167</swpartnum>    </swparts>    <swparts>      <modid>12</modid>      <swpartnum>23431286</swpartnum>    </swparts>    <swparts>      <modid>18</modid>      <swpartnum>15002457</swpartnum>    </swparts>    <swparts>      <modid>15</modid>      <swpartnum>23432184</swpartnum>    </swparts>    <swparts>      <modid>0</modid>      <swpartnum>22963834</swpartnum>    </swparts>    <calblocks>    </calblocks>    <apps>    </apps>  </module>  <module>    <modulename>Infotainment Silverbox  </modulename>    <manifestfilepartnum></manifestfilepartnum>    <lastmanifeststatus></lastmanifeststatus>    <basemodelpartnum>13596607</basemodelpartnum>    <endmodelpartnum>13596607</endmodelpartnum>    <swparts>      <modid>1</modid>      <swpartnum>13596622</swpartnum>    </swparts>    <swparts>      <modid>2</modid>      <swpartnum>13590574</swpartnum>    </swparts>    <calblocks>    </calblocks>    <apps>    </apps>  </module>

I was able to find the swpartnum for the Silverbox module in TIS2web (confirming I have the latest version, hurray!) but nothing else means anything to me yet.

 

Would love to be able to make some tweaks or even get custom code running on there. GM's app store code is probably lurking in there somewhere. The XML even has an empty apps section teasing it.

Share this post


Link to post
Share on other sites

I pm'd a guy about sharing info/files from the map update, would provide some insight about an update procedure or hopefully a bootloader if its more than just maps.

 

Another thing I've been looking into is the emmc chip. There's a test header and pads next to it. If the cmd,clk,and dat0 can be located then a nand dump can be obtained. Probably would be encrypted but its a start.

 

On the opposite side of the emmc chip near the test header there are 6 large test pads that are exposed while the PCB is encased. Would make since if those were associated.

post-124606-0-83839400-1416980575_thumb.jpg

post-124606-0-14365900-1416980590_thumb.jpg

post-124606-0-83839400-1416980575_thumb.jpg

post-124606-0-14365900-1416980590_thumb.jpg

post-124606-0-83839400-1416980575_thumb.jpg

post-124606-0-14365900-1416980590_thumb.jpg

post-124606-0-83839400-1416980575_thumb.jpg

post-124606-0-14365900-1416980590_thumb.jpg

  • Like 1

Share this post


Link to post
Share on other sites

I believe that is a jtag port. I have all the tools/mdi, tis, and about 100 extra modules if you need any help.

  • Like 1

Share this post


Link to post
Share on other sites

I just picked up a 2015 Colorado and am keen to do more with this unit. These were supposed to ship with GM's "AppShop" but that got delayed/scrubbed and who knows if they're ever going to ship it.

 

The systems are all QNX based. I'm trying to obtain the QNX SDK and going to see if they left debugging or something enabled (unlikely). I ran a port scan against the WiFi and there's nothing open at all. The unit lets me save the system info to a flash drive but it just dumps a mostly meaningless XML file...

  <module>    <modulename>HMIModule</modulename>    <manifestfilepartnum>7515400214</manifestfilepartnum>    <lastmanifeststatus>pass</lastmanifeststatus>    <basemodelpartnum>23493430</basemodelpartnum>    <endmodelpartnum>23493430</endmodelpartnum>    <swparts>      <modid>19</modid>      <swpartnum>23493441</swpartnum>    </swparts>    <swparts>      <modid>19</modid>      <swpartnum>23493441</swpartnum>    </swparts>    <swparts>      <modid>19</modid>      <swpartnum>10000002</swpartnum>    </swparts>    <swparts>      <modid>0</modid>      <swpartnum>23432167</swpartnum>    </swparts>    <swparts>      <modid>12</modid>      <swpartnum>23431286</swpartnum>    </swparts>    <swparts>      <modid>18</modid>      <swpartnum>15002457</swpartnum>    </swparts>    <swparts>      <modid>15</modid>      <swpartnum>23432184</swpartnum>    </swparts>    <swparts>      <modid>0</modid>      <swpartnum>22963834</swpartnum>    </swparts>    <calblocks>    </calblocks>    <apps>    </apps>  </module>  <module>    <modulename>Infotainment Silverbox  </modulename>    <manifestfilepartnum></manifestfilepartnum>    <lastmanifeststatus></lastmanifeststatus>    <basemodelpartnum>13596607</basemodelpartnum>    <endmodelpartnum>13596607</endmodelpartnum>    <swparts>      <modid>1</modid>      <swpartnum>13596622</swpartnum>    </swparts>    <swparts>      <modid>2</modid>      <swpartnum>13590574</swpartnum>    </swparts>    <calblocks>    </calblocks>    <apps>    </apps>  </module>

I was able to find the swpartnum for the Silverbox module in TIS2web (confirming I have the latest version, hurray!) but nothing else means anything to me yet.

 

Would love to be able to make some tweaks or even get custom code running on there. GM's app store code is probably lurking in there somewhere. The XML even has an empty apps section teasing it.

Loved working with QNX. I probably still have a QNX devel kit around here somewhere, but it will be very old. Like later 90's early 00's old. Last time I did anything with QNX was back then.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.