Jump to content

Recommended Posts

Posted

This will be a development thread on breaking and modifying the MyLink software.

 

Some of the software is available now, I'm going to pester Delphi for a release of the 2014 libraries.

 

If anybody would like to collaborate, here's some of what's available. I'll update this post with new info as its available.

 

http://oss.bosch-cm.com/gm.html

 

http://delphi.com/open-source/

  • Like 2
Posted (edited)

I read about the 2013 sonic/spark mylink updates. At first I was under the impression that radio updates needed to be done with a Tech2 tool. However I read that PI0941 details an update via USB flash drive, this is good news as we wouldn't need to JTag or develop hardware to make changes.

 

Now we need to get the update files for our radios to break them down. Appearently Delphi hosts the TIS2web service where the files reside.

 

Info

http://sandyblogs.com/techlink/?p=1668

Edited by OhmMega
  • 3 weeks later...
Posted

No luck on obtaining the update files yet. I'm investigating the options to hack the mylink hardware. Hoping I can find a UART debug console but it'll take time as I'm a novice to embedded hardware/software.

 

Here are some images of the computer. I haven't found any info on what arm CPU is being used.

 

 

post-124606-0-53988600-1383371360_thumb.jpg

post-124606-0-55209100-1383371392_thumb.jpg

post-124606-0-04374600-1383371409_thumb.jpg

post-124606-0-53988600-1383371360_thumb.jpg

post-124606-0-55209100-1383371392_thumb.jpg

post-124606-0-04374600-1383371409_thumb.jpg

post-124606-0-53988600-1383371360_thumb.jpg

post-124606-0-55209100-1383371392_thumb.jpg

post-124606-0-04374600-1383371409_thumb.jpg

post-124606-0-53988600-1383371360_thumb.jpg

post-124606-0-55209100-1383371392_thumb.jpg

post-124606-0-04374600-1383371409_thumb.jpg

  • 5 months later...
Posted

Not at all the same. The Silverado, impala, and some Cadillacs use a Bosch system. The Panasonic's can be found in the camaro, cruze, sonic, SS....

 

Different hardware and software.

 

The gm developers is a gimmick to help gm sales. Basically you or I can create an app, send it to gm for approval, and they market it as a perk for their vehicles.

 

The point here is to change the OS. Either to modify the current setup or to maybe android or something well designed for a mobile user interface.

 

I've also teased the idea of replacing the HMI with a raspberry pi. There are a few obsticals like the display runs off fpd-link and I'd have to compile a database of CAN messages.

  • 6 months later...
Posted

Chris White (The GTPprix guy) would probably be a great resource as he's already cataloged a lot of the process for himself, but I highly doubt he would be willing to share his secrets...

  • Like 1
Posted (edited)

Does anyone know on the process of obtaining a setup for this tool?

http://sandyblogs.com/techlink/?p=3832

EDIT: I answered my own question. It's INSANELY expensive, easily just under $3k for the first year for the Bosch MDI tool + Tis2WEB subscription. That's absurd.

Edited by szalkerous
  • 3 weeks later...
Posted

This is my winter project while I have down time.

 

I received a can bus shield for arduino compatible dev boards. Ill have it setup to record the messages going to the HMI module.

 

Once I compile a database of messages I'll start on implementing something like a pcduino/hummingboard/udoo... Then I'll have some work connecting and programming:

 

Can Bus

Vehicle telematics

Steering wheel controls

HVAC integration

Instrument cluster

Microphone

Display

4ch audio volume control

Rear cam

Bluetooth

 

This will all run in Android.

  • Like 1
Posted (edited)

I'm making up some new diagrams for the HMI Module.

 

Here's a text reference for the terminations until the images are finished.

 

Human Machine Interface Control Module NG 2.0

Gray plug [X2]

pin - color/stripe - description

01 - White/Violet - 12v+

02 - White/Green - MOST data

03 - Gray/Violet - MOST data

04 - na

05 - Gray/Yellow - unknown

06 - White/Blue - unknown

07 - na

08 - Gray/Violet - MOST data

09 - White/Green - MOST data

10 - na

11 - na

12 - na

 

Black plug [X1]

pin - color/stripe - description

01 - Gray/Yellow - Mic+

02 - Black/Gray - Mic-

03 - na

04 - na

05 - White/Blue - unknown

06 - na

07 - Red/Violet - 12v+ Battery

08 - Black - 0v (ground)

09 - Green/White - LIN data

10 - na

11 - Blue - CAN H

12 - White - CAN L

13 - Blue - CAN H

14 - White - CAN L

15 - na

16 - na

 

The CAN bus is jumped through in the module. I'm not sure what side is in and what side is out yet until i meter the wires.

The MOST bus is intriguing as it is an A/V bus connected through the HMI, Instrument Cluster, DISC Player, Display, Amplifier(if applicable) and Radio. MOST bus is also jumped through in the module.

The LIN bus I think hits the buttons like steering wheel, hvac controls, media controls...

 

I'm still investigating the system setup to further evaluate the next move, rather breaking the HMI software and reusing the hardware, or building a new bit of hardware. My only issue is a MOST controller is nearly impossible to come by. Although there are some aftermarket MOST integration products for foreign cars.

The HMI is actually pretty decent at a glance, it has 8Gb DDR3 Ram, 32Gb eMMC, LIN, CAN, MOST50, Accelerometer, BT/Wifi, GPS.

 

I'm may start finding someone with one of the nav map updates to see if they'll share the files. It may have some insight into the update process and maybe an easy way into the software. Otherwise steps will have to be taken to try and read the eMMC memory.

 

More to come...

Edited by OhmMega
  • Like 2
Posted

I just picked up a 2015 Colorado and am keen to do more with this unit. These were supposed to ship with GM's "AppShop" but that got delayed/scrubbed and who knows if they're ever going to ship it.

 

The systems are all QNX based. I'm trying to obtain the QNX SDK and going to see if they left debugging or something enabled (unlikely). I ran a port scan against the WiFi and there's nothing open at all. The unit lets me save the system info to a flash drive but it just dumps a mostly meaningless XML file...

  <module>    <modulename>HMIModule</modulename>    <manifestfilepartnum>7515400214</manifestfilepartnum>    <lastmanifeststatus>pass</lastmanifeststatus>    <basemodelpartnum>23493430</basemodelpartnum>    <endmodelpartnum>23493430</endmodelpartnum>    <swparts>      <modid>19</modid>      <swpartnum>23493441</swpartnum>    </swparts>    <swparts>      <modid>19</modid>      <swpartnum>23493441</swpartnum>    </swparts>    <swparts>      <modid>19</modid>      <swpartnum>10000002</swpartnum>    </swparts>    <swparts>      <modid>0</modid>      <swpartnum>23432167</swpartnum>    </swparts>    <swparts>      <modid>12</modid>      <swpartnum>23431286</swpartnum>    </swparts>    <swparts>      <modid>18</modid>      <swpartnum>15002457</swpartnum>    </swparts>    <swparts>      <modid>15</modid>      <swpartnum>23432184</swpartnum>    </swparts>    <swparts>      <modid>0</modid>      <swpartnum>22963834</swpartnum>    </swparts>    <calblocks>    </calblocks>    <apps>    </apps>  </module>  <module>    <modulename>Infotainment Silverbox  </modulename>    <manifestfilepartnum></manifestfilepartnum>    <lastmanifeststatus></lastmanifeststatus>    <basemodelpartnum>13596607</basemodelpartnum>    <endmodelpartnum>13596607</endmodelpartnum>    <swparts>      <modid>1</modid>      <swpartnum>13596622</swpartnum>    </swparts>    <swparts>      <modid>2</modid>      <swpartnum>13590574</swpartnum>    </swparts>    <calblocks>    </calblocks>    <apps>    </apps>  </module>

I was able to find the swpartnum for the Silverbox module in TIS2web (confirming I have the latest version, hurray!) but nothing else means anything to me yet.

 

Would love to be able to make some tweaks or even get custom code running on there. GM's app store code is probably lurking in there somewhere. The XML even has an empty apps section teasing it.

Posted

I pm'd a guy about sharing info/files from the map update, would provide some insight about an update procedure or hopefully a bootloader if its more than just maps.

 

Another thing I've been looking into is the emmc chip. There's a test header and pads next to it. If the cmd,clk,and dat0 can be located then a nand dump can be obtained. Probably would be encrypted but its a start.

 

On the opposite side of the emmc chip near the test header there are 6 large test pads that are exposed while the PCB is encased. Would make since if those were associated.

post-124606-0-83839400-1416980575_thumb.jpg

post-124606-0-14365900-1416980590_thumb.jpg

post-124606-0-83839400-1416980575_thumb.jpg

post-124606-0-14365900-1416980590_thumb.jpg

post-124606-0-83839400-1416980575_thumb.jpg

post-124606-0-14365900-1416980590_thumb.jpg

post-124606-0-83839400-1416980575_thumb.jpg

post-124606-0-14365900-1416980590_thumb.jpg

  • Like 1
  • 2 weeks later...
Posted

I just picked up a 2015 Colorado and am keen to do more with this unit. These were supposed to ship with GM's "AppShop" but that got delayed/scrubbed and who knows if they're ever going to ship it.

 

The systems are all QNX based. I'm trying to obtain the QNX SDK and going to see if they left debugging or something enabled (unlikely). I ran a port scan against the WiFi and there's nothing open at all. The unit lets me save the system info to a flash drive but it just dumps a mostly meaningless XML file...

  <module>    <modulename>HMIModule</modulename>    <manifestfilepartnum>7515400214</manifestfilepartnum>    <lastmanifeststatus>pass</lastmanifeststatus>    <basemodelpartnum>23493430</basemodelpartnum>    <endmodelpartnum>23493430</endmodelpartnum>    <swparts>      <modid>19</modid>      <swpartnum>23493441</swpartnum>    </swparts>    <swparts>      <modid>19</modid>      <swpartnum>23493441</swpartnum>    </swparts>    <swparts>      <modid>19</modid>      <swpartnum>10000002</swpartnum>    </swparts>    <swparts>      <modid>0</modid>      <swpartnum>23432167</swpartnum>    </swparts>    <swparts>      <modid>12</modid>      <swpartnum>23431286</swpartnum>    </swparts>    <swparts>      <modid>18</modid>      <swpartnum>15002457</swpartnum>    </swparts>    <swparts>      <modid>15</modid>      <swpartnum>23432184</swpartnum>    </swparts>    <swparts>      <modid>0</modid>      <swpartnum>22963834</swpartnum>    </swparts>    <calblocks>    </calblocks>    <apps>    </apps>  </module>  <module>    <modulename>Infotainment Silverbox  </modulename>    <manifestfilepartnum></manifestfilepartnum>    <lastmanifeststatus></lastmanifeststatus>    <basemodelpartnum>13596607</basemodelpartnum>    <endmodelpartnum>13596607</endmodelpartnum>    <swparts>      <modid>1</modid>      <swpartnum>13596622</swpartnum>    </swparts>    <swparts>      <modid>2</modid>      <swpartnum>13590574</swpartnum>    </swparts>    <calblocks>    </calblocks>    <apps>    </apps>  </module>

I was able to find the swpartnum for the Silverbox module in TIS2web (confirming I have the latest version, hurray!) but nothing else means anything to me yet.

 

Would love to be able to make some tweaks or even get custom code running on there. GM's app store code is probably lurking in there somewhere. The XML even has an empty apps section teasing it.

Loved working with QNX. I probably still have a QNX devel kit around here somewhere, but it will be very old. Like later 90's early 00's old. Last time I did anything with QNX was back then.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Forum Statistics

    250.5k
    Total Topics
    2.7m
    Total Posts
  • Member Statistics

    342,924
    Total Members
    8,960
    Most Online
    KirbyCo
    Newest Member
    KirbyCo
    Joined
  • Who's Online   3 Members, 0 Anonymous, 1,446 Guests (See full list)


  • Latest Articles

  • Posts

    • I will be doing that for sure, but I need to solve who has/ where I can find a bidirectional scan tool that will support OBD 1.5. I'm kicking myself because I ebay'ed a Snap On MT2500 that I didn't think I'd ever need anymore. D'oh!! I'd rather not buy another, so I'll contact a few local shops to see if they have one and how much they'd want to do the procedure. I'd rather have the ability to do it myself... I wish there was a modern tool that could do it all, but I'd have no idea what to buy.   The theory with the pulled timing is that it mimics a rich condition. The delayed spark causes incomplete burn and the O2 sensor picks up low oxygen levels. That's interpreted as a rich condition so the PCM pulls fuel and that shows up in the deeply negative fuel trims.
    • An ultra wealthy man had the most beautiful daughter. But, there was a problem. Everything she touched would melt in her hands. No matter what, Metal, Wood, Stone. Anything she touched would melt. She could not feed herself. Because of this, men were afraid of her. Nobody would dare marry her. Her father was despaired. What could he do to help his daughter? He consulted doctors, scientists and anybody who could solve this problem. Finally one of them said, "If your daughter touches one thing that does not melt in her hands, she will be cured." He was overjoyed and came up with a plan. The next day, he held a competition. Any man who could bring his daughter an object that would not melt in her hands would be given billions of dollars to marry her. Three extremely intelligent and handsome young men took up the challenge. The first brought a very heavy steel rod, But alas, when the she touched it, it completely melted in a matter of seconds. He sadly went away. The second brought a beautiful diamond, knowing diamonds were one of the hardest substance in the world and would not melt. But alas, once she held it in her hand, it melted. He too was sent away disappointed. So now, there was one left He was very nervous & sweating. He approached the daughter & said, “put your hand in my pants pocket and feel what is in there." She did exactly what he asked. She felt something very hard. She held it in her hand, squeezing it as hard as she could. It did not melt & remained extremely hard. Her father was overjoyed. Everybody was overjoyed. She was finally cured. Nothing never, ever melted in her hand again. They married and they both lived happily ever after, raising a wonderful family. Question: What was in the the groom’s pants pocket??? Answer below ↓ M&Ms of course! They melt in your mouth, not in your hand. What on earth were you thinking?
    • There's a bunch of tea leaves that you've read, but in any case the delayed timing is unusual. Not sure how that relates to the rich at idle vs. 'normal' while driving.   If you're in this deep, might be worth investigating, and re-learning the sensor. What have you got to lose? Plus, it properly fixes the timing cover leak.
    • The only problem I have seen this cause is longer crank times. 
    • Injector is being sent off today for rebuild and I estimate I'll have it back in 10 days or so.   It may not be the injector...of course...now that I've torn down the intake again. But, let's rule out the injector and replace those spider legs that have been almost rubbed through.   The truck has always had negative timing and I'm reading "normal" timing at warm idle should be +16 or so. I'm negative 16 to 25 or more, and it's always been like that since I bought it.   A light turned on upstairs last night in the old noggin. Rare, I know...   This will be wild, if it turns out to be the cause!   In 2001, according to the old service documentation, the muffler was replaced. Why? I have no idea, it wouldn't have been rusted through by then. But they did a crappy job.   In 2019, another shop replaced it and noted the prior install was poorly done on the work order. "Exhaust system vibrates on crossmember". Except...I guess they just left it be? I believe the husband, the couple who were original owners, had passed by then. Maybe she said it's just not worth it to have the exhaust system fixed and declined repairs. Very few miles were driven between 2019 and 2025.   The exhaust system vibrates heavily on the crossmember and you can feel it and REALLY hear it, even today. Not always, but at idle, it gets going pretty good sometimes.   What if....   ....What if that's enough to trigger one or both of the knock sensors? Could it be tricking the sensors into sensing knock, so it's pulling timing aggressively? Pulling timing heavily means it's firing after the piston reaches full height which means incomplete burn which means the O2 sensor is sensing a rich condition, which means I've been chasing my tail, and what I thought was an inconsequential problem (janky exhaust) has been THE issue for this truck for 25 solid years?   That would be wild. Maybe it IS wild.   The service documentation thereafter, for years, shows visits for rough idle, replacing O2's, replacing the cat, replacing plugs and wires, a misfire condition, like they could never solve the issue. The injector has been replaced 4 times in 80k miles, that's just crazy.   The secondary theory....   The engine has clearly had a leak at the front seal for a very long time (the greasy trench...). I think the truck changed hands quickly ~2025 because there's Napa receipts from someone I don't recognize in the ownership history. They apparently replaced the timing cover seal, and they did a terrible job. There's RTV smeared all over and the leak I had reduced to a weep by snugging the front oil pan bolts is now a leak again.   HOWEVER....I read about replacing the crankshaft position sensor. Any time the ckp sensor is disturbed or timing cover is removed, the truck requires relearning, and that can only be done through a bi-directional scan tool. Skippy with the RTV probably didn't do the relearn procedure is my guess. His scan tool is lost in a pile of RTV goo somewhere.   So, it's very possible the sensor has been disturbed and the truck is just running on the old learn data but not setting a code for anything. The distributor has since been replaced and so has the camshaft position sensor, so all bets are off for that thing.   In the theme of one step forward, two steps back, I returned the accumulator for the AC. The gal I've been working with at O'Really's has been great. She refunded it under manufacturer's defect and we compared it to the replacement I ordered, and sure enough, the replacement is machined very differently (and a gauge actually fits on it!).   Got it home, installed it, started vacuuming it down.... and I couldn't get good vacuum.   The high side service port, where I replaced the old GM ball valve suspecting that was a source of the previous leak....well, I've clearly exposed whatever pre-existing crack in the line where the service port is welded, and made it much worse. Blessing in disguise? Except there goes another $25, now I'm waiting for a replacement AC line.   In 10-ish days ALL the parts will be here. Rebuilt injector, new exhaust system, new cat, new high pressure AC line.   Oh, did I mention the squeaking ISN'T coming from the AC pump? The truck still squeaks when started, and there were words after I started it with the new AC pump installed. But, there was more to replacing the AC pump for just a squeak. A truck with good working AC is something of value, for the comfort alone.   I've ordered a new harmonic balancer because, 30 years is a good run for one of those. Rule it out. The squeak may be something more sinister, though. I'm worried about that ckp sensor and if it was shimmed correctly, or if the timing set was installed correctly. The squeak may be coming from UNDER the timing cover.   At this point, once I get it put back together, I'm thinking I'll take a 50 mile victory lap and then promptly put it up for sale. This truck is cursed. Betty, from beyond the grave, doesn't want anyone messing with her Blazer. Or maybe she's getting revenge for 30 years of shop visits with that thing.
  • GM-Trucks.com Clubs

  • Popular Contributors

×
×
  • Create New...