RomRaider

Well....there are some issues here since to be honest, I came across this a couple of weeks back by complete accident (I was looking for a SSM document and it just so happens this project has it and Google tags it as such).

The problem here is that this project uses a binary dump of it seems the 0.91 ECUflash kernel (KERNEL.HEX). So basically it looks like to me that it loads and writes this binary using Denso commands that are no longer really applicable to CANbus based flashes (which for now is the only thing I'm personally concerned with since going forward I believe all future models will follow this path).

I am assuming modern ECUflash uses passthru J2534 commands to read and write to memory which btw is already in RR for the most part. The real issue is the kernel or RAM flash image you use to get you going.

The other issue that is confusing me is that the Renesas flash developer's docs claim that there is already a set protocol for SH7058 that you can use to flash it...I don't know what that really means at this point.

EDIT:

I have discovered Renesas's toolchain which is the HPEW (you can download an eval copy) which presumely has a full software emulator. They have a full SH7058 ICE that would be kick ass (basically its like buying an ECU with complete debugging setup for you) however, can I put in an expense report for 9k? Ouch.

Software emulation might be cool.

Also found the KPIT GNU toolchain which is an Eclipse IDE (yay, maybe, CDT hasn't been that great in my eyes, especially the indexer) which comes with a simulator - but I have a feeling that is just ISA stuff....i.e. it doesn't simulate SH7058 booting up or the HCAN controller on it (memory mapped resources).



Its a good thought and I wish it was that simple but its not. I am learning a lot though about how this all works (I just wish I knew a little bit more about tuning a car!).

Let me look at stuff and hopefully give an update within the next couple of days....I really would like to contribute...

Sorry guys, I'm still on it, I have not forgotten, I had a heckit work week and Memorial Day weekend....still looking at stuff regarding flashing...Renesas has a lot of tools but its hard to dissect all of them.

From my understanding (having a quick flick through defs) there are 4 different flash methods, depending on the model. All markets 01-03 models (as well as 04-05 ADM, EDM, SADM and JDM models - they were all 2.0L) use the same write method (described as wrx02 in the ROM), all 04 USDM models use the same write method (described as sti04 in the ROM), 05 USDM and all market 06-07 models use the same write method (described as sti05 in the ROM) use the same method and then there is the CAN method (described as subarucan in the ROM).

Having a brief look through the ecuexplorer source, it looks like it only supported the first three methods - wrx02, sti04 and sti05 - so with the latest definitions the code should support flashing all models upto 07. But as you found, it doesn't support CAN models


np and I understand as you have no need to look at the earlier flash methods. BUT, if you do find a CAN flash method and provide it for inclusion with RomRaider (which would be awesome btw), it would also be great to be able to flash earlier models using the flash methods that are already included in ecuexplorer (hint hint)


Anything you can contribute regarding the ability for RomRaider to read/write without ecuflash would be awesome and I'm sure numerous RomRaider users are reading your posts in anticipation

Also, I'm sure there are a few devs around who could work with you in getting this happening - so if you hit a road block just yell out and one will surely answer

Good luck

No, ecuexplorer only supports wrx02 and wrx04 flashmethods, i.e. the 16-bit ECU. wrx04 ONLY applies to the USDM 04-05 WRX, nothing else. wrx02 is all other 16-bit ECUs, regardless of year (usdm 02-03 WRX, non-usdm 01/02-05 turbo models). sti04 is 32-bit ECUs with a 512kb image (early models, typically 04 MY). sti05 is all 32-bit ECU with 1mb image that are not CAN.

Ah, cheers for clearing that up Merchgod.

So although there is GPL'd code for read/write of 16bit Subaru's, someone would still have to develop the read/write code under GPL for 32bit and CAN Subaru's before full read/write support could be integrated into RomRaider - is that correct?

You wouldn't happen to have any links to docs, books, or further information that I can read/buy to gain an understanding and knowledge of this whole process?

There not much out there that I know of. I don't know enough about myself to be of any help.

what happened?