only:nissan TCU script progress
This commit is contained in:
rusefillc
parent
fdd9eddc3b
commit
b5fd520247
|
|
@ -0,0 +1,235 @@
|
|||
-- scriptname man-in-the-middle-nissan-tcu.txt
|
||||
|
||||
-- sometimes we want to cut a CAN bus and install rusEFI into that cut
|
||||
-- https://en.wikipedia.org/wiki/Man-in-the-middle_attack
|
||||
|
||||
-- this controls onCanRx rate as well!
|
||||
setTickRate(300)
|
||||
|
||||
ECU_BUS = 1
|
||||
-- really 'not ECU'
|
||||
TCU_BUS = 2
|
||||
|
||||
|
||||
TCU_251_593 = 593
|
||||
TCU_253_595 = 595
|
||||
|
||||
hexstr = { 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, "A", "B", "C", "D", "E", "F" }
|
||||
|
||||
function toHexString(num)
|
||||
if num == 0 then
|
||||
return '0'
|
||||
end
|
||||
|
||||
local result = ""
|
||||
while num > 0 do
|
||||
local n = num % 16
|
||||
result = hexstr[n + 1] ..result
|
||||
num = math.floor(num / 16)
|
||||
end
|
||||
return result
|
||||
end
|
||||
|
||||
function arrayToString(arr)
|
||||
local str = ""
|
||||
local index = 1
|
||||
while arr[index] ~= nil do
|
||||
str = str.." "..toHexString(arr[index])
|
||||
index = index + 1
|
||||
end
|
||||
return str
|
||||
end
|
||||
|
||||
totalEcuMessages = 0
|
||||
totalTcuMessages = 0
|
||||
totalDropped = 0
|
||||
totalReplaced = 0
|
||||
|
||||
function silentDrop(bus, id, dlc, data)
|
||||
totalDropped = totalDropped + 1
|
||||
end
|
||||
|
||||
function printAndDrop(bus, id, dlc, data)
|
||||
print('Dropping ' ..arrayToString(data))
|
||||
totalDropped = totalDropped + 1
|
||||
end
|
||||
|
||||
|
||||
ENGINE_1_505 = 505
|
||||
ENGINE_2_561 = 561
|
||||
ENGINE_7_563 = 563
|
||||
ENGINE_3_573 = 573
|
||||
ENGINE_4_574 = 574
|
||||
ENGINE_5_1361 = 1361
|
||||
ENGINE_6_1408 = 1408
|
||||
|
||||
function onAnythingFromECU(bus, id, dlc, data)
|
||||
-- totalEcuMessages = totalEcuMessages + 1
|
||||
if id ~= ENGINE_1_505
|
||||
and id ~= ENGINE_2_561
|
||||
and id ~= ENGINE_7_563
|
||||
and id ~= ENGINE_3_573
|
||||
and id ~= ENGINE_4_574
|
||||
and id ~= ENGINE_5_1361
|
||||
and id ~= ENGINE_6_1408
|
||||
and id ~= 721
|
||||
and id ~= 734
|
||||
then
|
||||
print('from ECU ' ..id .." " ..arrayToString(data) .." dropped=" ..totalDropped .." replaced " ..totalReplaced)
|
||||
end
|
||||
if id < 2048 then
|
||||
txCan(TCU_BUS, id, 0, data) -- relay non-TCU message to TCU
|
||||
else
|
||||
print ("Not relaying EXT" .. id)
|
||||
end
|
||||
end
|
||||
|
||||
function relayFromECU(bus, id, dlc, data)
|
||||
totalEcuMessages = totalEcuMessages + 1
|
||||
|
||||
|
||||
txCan(TCU_BUS, id, 0, data) -- relay non-TCU message to TCU
|
||||
end
|
||||
|
||||
function onAnythingFromTCU(bus, id, dlc, data)
|
||||
totalTcuMessages = totalTcuMessages + 1
|
||||
if id ~= TCU_251_593 and id ~= TCU_253_595 then
|
||||
print('from TCU ' ..id .." " ..arrayToString(data) .." dropped=" ..totalDropped .." replaced " ..totalReplaced)
|
||||
end
|
||||
txCan(ECU_BUS, id, 0, data) -- relay non-ECU message to ECU
|
||||
end
|
||||
|
||||
--function getTwoBytesLSB(data, offset, factor)
|
||||
-- return (data[offset + 2] * 256 + data[offset + 1]) * factor
|
||||
--end
|
||||
|
||||
function getTwoBytesMSB(data, offset, factor)
|
||||
return (data[offset + 1] * 256 + data[offset + 2]) * factor
|
||||
end
|
||||
|
||||
function setTwoBytesMsb(data, offset, value)
|
||||
value = math.floor(value)
|
||||
data[offset + 1] = value >> 8
|
||||
data[offset + 2] = value & 0xff
|
||||
end
|
||||
|
||||
local rpm = 0
|
||||
|
||||
payloadENGINE_1_505 = {0x20, 0x00, 0x1a, 0x5e, 0x00, 0x00, 0x00, 0x00}
|
||||
function onENGINE_1_505(bus, id, dlc, data)
|
||||
rpm = getTwoBytesMSB(data, 2, 0.125)
|
||||
|
||||
setTwoBytesMsb(data, 2, 8 * rpm)
|
||||
txCan(TCU_BUS, ENGINE_1_505, 0, payloadENGINE_1_505)
|
||||
end
|
||||
|
||||
pps = 0
|
||||
-- 231
|
||||
payloadENGINE_2_561 = {0xe0, 0x80, 0x09, 0xe0, 0xd4, 0xc3, 0x4c, 0x9e}
|
||||
function onENGINE_2_561(bus, id, dlc, data)
|
||||
payloadENGINE_2_561[3] = pps / 0.5 -- data[3] -- tps or pps
|
||||
txCan(TCU_BUS, ENGINE_2_561, 0, payloadENGINE_2_561)
|
||||
end
|
||||
|
||||
payloadENGINE_7_563 = {0x79, 0xa2, 0x00, 0x18, 0x0e, 0x00, 0x00, 0x01}
|
||||
-- 233
|
||||
function onENGINE_7_563(bus, id, dlc, data)
|
||||
rpm315
|
||||
payloadENGINE_7_563[4] = data[4] -- RPMlow
|
||||
payloadENGINE_7_563[7] = data[7] -- RPMhi
|
||||
txCan(TCU_BUS, ENGINE_7_563, 0, payloadENGINE_7_563)
|
||||
end
|
||||
|
||||
payloadENGINE_3_573 = {0x00, 0x0e, 0x0b, 0x0e, 0x01, 0x38, 0x00, 0x79}
|
||||
-- 23D
|
||||
function onENGINE_3_573(bus, id, dlc, data)
|
||||
-- payloadENGINE_3_573[1] = data[1]
|
||||
payloadENGINE_3_573[2] = data[2]
|
||||
pps = payloadENGINE_3_573[2] * 0.392
|
||||
payloadENGINE_3_573[3] = pps / 0.392 -- data[3] -- Throttle_position_capped
|
||||
-- payloadENGINE_3_573[7] = data[7] -- CLT
|
||||
txCan(TCU_BUS, ENGINE_3_573, 0, payloadENGINE_3_573)
|
||||
-- txCan(TCU_BUS, ENGINE_3_573, 0, data)
|
||||
end
|
||||
|
||||
ENGINE_4_574 = 574
|
||||
payloadENGINE_4_574 = {0x00, 0x40, 0xff, 0x45, 0x00, 0xd6, 0x00, 0xa2}
|
||||
-- 23E
|
||||
function onENGINE_4_574(bus, id, dlc, data)
|
||||
payloadENGINE_4_574[3] = 0xFF pps / 0.392 -- data[3] -- affects desired torque converter pressure Throttle_position_inverted
|
||||
payloadENGINE_4_574[7] = pps / 0.392 -- data[7] -- TPS
|
||||
txCan(TCU_BUS, ENGINE_4_574, 0, payloadENGINE_4_574)
|
||||
end
|
||||
|
||||
payloadENGINE_5 = {0x7d, 0xdb, 0x00, 0xa0, 0x00, 0x02, 0x80, 0xff}
|
||||
function onENGINE_5(bus, id, dlc, data)
|
||||
txCan(TCU_BUS, ENGINE_5_1361, 0, payloadENGINE_5)
|
||||
end
|
||||
|
||||
payloadENGINE_6 = {0x00, 0x82, 0x40, 0x00, 0x00, 0x00, 0x00, 0x00}
|
||||
function onENGINE_6(bus, id, dlc, data)
|
||||
txCan(TCU_BUS, ENGINE_6_1408, 0, payloadENGINE_6)
|
||||
end
|
||||
|
||||
canRxAdd(ECU_BUS, ENGINE_1_505, onENGINE_1_505)
|
||||
canRxAdd(ECU_BUS, ENGINE_2_561, onENGINE_2_561)
|
||||
canRxAdd(ECU_BUS, ENGINE_7_563, onENGINE_7_563)
|
||||
canRxAdd(ECU_BUS, ENGINE_3_573, onENGINE_3_573)
|
||||
canRxAdd(ECU_BUS, ENGINE_4_574, onENGINE_4_574)
|
||||
canRxAdd(ECU_BUS, ENGINE_5_1361, onENGINE_5)
|
||||
canRxAdd(ECU_BUS, ENGINE_6_1408, onENGINE_6)
|
||||
|
||||
|
||||
--canRxAdd(ECU_BUS, ENGINE_4_574, silentDrop)
|
||||
--canRxAdd(ECU_BUS, ENGINE_5_1361, relayFromECU)
|
||||
--canRxAdd(ECU_BUS, ENGINE_6_1408, relayFromECU)
|
||||
|
||||
--canRxAdd(ECU_BUS, 721, silentDrop) -- required for TCU not to throw code
|
||||
--canRxAdd(ECU_BUS, 734, silentDrop) -- required for TCU not to throw code
|
||||
|
||||
|
||||
canRxAdd(ECU_BUS, 2, silentDrop)
|
||||
canRxAdd(ECU_BUS, 533, silentDrop)
|
||||
canRxAdd(ECU_BUS, 534, silentDrop)
|
||||
canRxAdd(ECU_BUS, 640, silentDrop)
|
||||
canRxAdd(ECU_BUS, 644, silentDrop)
|
||||
canRxAdd(ECU_BUS, 645, silentDrop)
|
||||
canRxAdd(ECU_BUS, 670, silentDrop)
|
||||
canRxAdd(ECU_BUS, 672, silentDrop)
|
||||
canRxAdd(ECU_BUS, 677, silentDrop)
|
||||
|
||||
canRxAdd(ECU_BUS, 861, silentDrop)
|
||||
canRxAdd(ECU_BUS, 901, silentDrop)
|
||||
|
||||
canRxAdd(ECU_BUS, 852, silentDrop)
|
||||
canRxAdd(ECU_BUS, 856, silentDrop)
|
||||
canRxAdd(ECU_BUS, 1940, silentDrop)
|
||||
canRxAdd(ECU_BUS, 1783, silentDrop)
|
||||
canRxAdd(ECU_BUS, 1477, silentDrop)
|
||||
canRxAdd(ECU_BUS, 1549, silentDrop)
|
||||
canRxAdd(ECU_BUS, 1738, silentDrop)
|
||||
canRxAdd(ECU_BUS, 1573, silentDrop)
|
||||
|
||||
|
||||
-- last option: unconditional forward of all remaining messages
|
||||
canRxAddMask(ECU_BUS, 0, 0, onAnythingFromECU)
|
||||
canRxAddMask(TCU_BUS, 0, 0, onAnythingFromTCU)
|
||||
|
||||
everySecondTimer = Timer.new()
|
||||
|
||||
_10msPeriodTimer = Timer.new()
|
||||
|
||||
function onTick()
|
||||
if everySecondTimer : getElapsedSeconds() > 1 then
|
||||
print("rpm " .. rpm .. " pps " .. pps)
|
||||
everySecondTimer : reset()
|
||||
print("Total from ECU " ..totalEcuMessages .." from TCU " ..totalTcuMessages .." dropped=" ..totalDropped .." replaced " ..totalReplaced)
|
||||
end
|
||||
|
||||
if _10msPeriodTimer : getElapsedSeconds() > 0.01 then
|
||||
_10msPeriodTimer : reset()
|
||||
end
|
||||
|
||||
|
||||
end
|
||||
|
||||
Loading…
Reference in New Issue