SSM Write Address Blocked (canbus/kline)

aijii · **Joined:** Sun Oct 16, 2011 7:57 am **Posts:** 150

Current stumbling block for live tuning seems to be the ECU is blocking writing using A8 SSM command to anything but a very limited subset of addresses. We want to write to RAM.

Any ideas on whether there is a simple patch in ROM that can be made to open up the range of addresses we can write to?

This affects KLINE and CANBUS.

Sasha_A80 · **Posted:** Mon Nov 04, 2019 8:39 pm

Use B0 command for kline. Denso ecu will block just a stack region to prevent ecu program hacking.

aijii · **Joined:** Sun Oct 16, 2011 7:57 am **Posts:** 150

Interesting. Thanks for the tip, I'm going to try it out right now!

Do you know if such a thing also exists for CANbus ?

Where abouts could I prod around in a ROM to investigate the commands that are available for both Kline and CANBus ?

Sasha_A80 · **Posted:** Tue Nov 05, 2019 4:57 pm

SSM CAN protocol does not allow data to be loaded to an arbitrary RAM location.
B8 command for some remapped addresses is still supported similar to kline version low addresses.
You are to add an applicable Unified Data Service extension ( not implemented for Subaru ecu"s ) for RAM data loading.

RomRaider

SSM Write Address Blocked (canbus/kline)

Who is online