X-Git-Url: http://git.rot13.org/?p=goodfet;a=blobdiff_plain;f=client%2FFordExperiments.py;h=9d933760dcea1802c3970970087fc042d5f44b82;hp=d42fbca26f227a857d3ca31fdf924e2705cc1189;hb=bb506a11d7de4367ef5a42a367dda15d958a6931;hpb=dfdc03e81e65e8c48000e47c2a14da572d301e65 diff --git a/client/FordExperiments.py b/client/FordExperiments.py index d42fbca..9d93376 100644 --- a/client/FordExperiments.py +++ b/client/FordExperiments.py @@ -12,6 +12,7 @@ from GoodFETMCPCANCommunication import GoodFETMCPCANCommunication from intelhex import IntelHex; import Queue import math +import wave tT = time class FordExperiments(experiments): @@ -141,16 +142,22 @@ class FordExperiments(experiments): is a simple "background" retriever in that it returns the packet that is of the given id that was sniffed off the bus. """ + self.client.serInit() + self.spitSetup(500) + self.addFilter([sId,sId,sId,sId,sId,sId]) packet1 = self.client.rxpacket(); if(packet1 != None): packetParsed = self.client.packet2parsed(packet1); #keep sniffing till we read a packet startTime = time.time() - while( packet1 == None or packetParsed.get('sID') != sId and (time.time() - startTime) < 20): + while( (packet1 == None or packetParsed.get('sID') != sId) and (time.time() - startTime) < 5): packet1 = self.client.rxpacket() + print packet1 if(packet1 != None): packetParsed = self.client.packet2parsed(packet1) - + if( packet1 == None or packetParsed.get('sID') != sId): + print "exiting without packet" + #print "returning", packetParsed #recieveTime = time.time() return packetParsed @@ -349,7 +356,45 @@ class FordExperiments(experiments): # spit new value for 1 second while (time.time()-starttime < 10): self.multiPacketSpit(packet0rts=True) + + def setEngineTemp(self,temp): + self.client.serInit() + self.spitSetup(500) + + self.addFilter([1056, 1056, 1056,1056,1056,1056]) + self.client.rxpacket() + self.client.rxpacket() + self.client.rxpacket() + SIDlow = (1056 & 0x07) << 5; # get SID bits 2:0, rotate them to bits 7:5 + SIDhigh = (1056 >> 3) & 0xFF; # get SID bits 10:3, rotate them to bits 7:0 + + startTime = time.time() + #while((time.time() - startTime) < 10): + + packet = None; + + # catch a packet and check its db4 value + while (packet == None): + packet=self.client.rxpacket(); + + + newTemp = int(math.ceil(level/1.8 + 22)) + #print "Fake MPH = 1.617(%d)-63.5 = %d" %(newSpeed, mph) + + newPacket = [SIDhigh, SIDlow, 0x00,0x00, # pad out EID regs + 0x08, # bit 6 must be set to 0 for data frame (1 for RTR) + # lower nibble is DLC + newTemp,ord(packet[6]),ord(packet[7]),ord(packet[8]),ord(packet[9]),ord(packet[10]),ord(packet[11]),ord(packet[12])] + + # load new packet into TXB0 and check time + self.multiPacketSpit(packet0=newPacket, packet0rts=True) + starttime = time.time() + + # spit new value for 1 second + while (time.time()-starttime < 10): + self.multiPacketSpit(packet0rts=True) + def overHeatEngine(self): self.client.serInit() self.spitSetup(500) @@ -376,7 +421,7 @@ class FordExperiments(experiments): packet = self.getBackground(1056) SIDlow = (1056 & 0x07) << 5; # get SID bits 2:0, rotate them to bits 7:5 SIDhigh = (1056 >> 3) & 0xFF; # get SID bits 10:3, rotate them to bits 7:0 - odomFuzz = random.randint(0,255) + odomFuzz = random.randint(1,254) print packet newPacket = [SIDhigh, SIDlow, 0x00,0x00, # pad out EID regs 0x08, # bit 6 must be set to 0 for data frame (1 for RTR) @@ -386,7 +431,7 @@ class FordExperiments(experiments): startTime = time.time() packet[6] = odomFuzz; while( time.time()- startTime < 10): - odomFuzz = random.randint(0,255) + odomFuzz = random.randint(1,254) newPacket[6] = odomFuzz self.client.txpacket(newPacket) @@ -429,16 +474,18 @@ class FordExperiments(experiments): self.multiPacketSpit(packet0rts=True) - def warningLightsOn(self,checkEngine, checkTransmission, transmissionOverheated, engineLight, battery, fuelCap, checkBreakSystem,ABSLight): - self.addFilter([1056, 1056, 530, 530, 1056]) + def warningLightsOn(self,checkEngine, checkTransmission, transmissionOverheated, engineLight, battery, fuelCap, checkBreakSystem,ABSLight, dashB): + if( checkBreakSystem == 1 or ABSLight == 1): SIDlow = (530 & 0x07) << 5; # get SID bits 2:0, rotate them to bits 7:5 SIDhigh = (530 >> 3) & 0xFF; # get SID bits 10:3, rotate them to bits 7:0 + print "looking for 530" packet = self.getBackground(530) + print "found" packet2 = [SIDhigh, SIDlow, 0x00,0x00, # pad out EID regs 0x08, # bit 6 must be set to 0 for data frame (1 for RTR) # lower nibble is DLC - ord(packet[5]),ord(packet[6]),ord(packet[7]),ord(packet[8]),ord(packet[9]),ord(packet[10]),ord(packet[11]),ord(packet[12])] + packet['db0'],packet['db1'],packet['db2'],packet['db3'],packet['db4'],packet['db5'],packet['db6'],packet['db7']] if( checkBreakSystem == 1 and ABSLight == 1): packet2[9] = 97 elif( checkBreakSystem == 0 and ABSLight == 1): @@ -452,11 +499,13 @@ class FordExperiments(experiments): print packet2 SIDlow = (1056 & 0x07) << 5; # get SID bits 2:0, rotate them to bits 7:5 SIDhigh = (1056 >> 3) & 0xFF; # get SID bits 10:3, rotate them to bits 7:0 + print "looking for 1056" packet = self.getBackground(1056) + print "found" packet1 = [SIDhigh, SIDlow, 0x00,0x00, # pad out EID regs 0x08, # bit 6 must be set to 0 for data frame (1 for RTR) # lower nibble is DLC - ord(packet[5]),ord(packet[6]),ord(packet[7]),ord(packet[8]),ord(packet[9]),ord(packet[10]),ord(packet[11]),ord(packet[12])] + packet['db0'],packet['db1'],packet['db2'],packet['db3'],packet['db4'],packet['db5'],packet['db6'],packet['db7']] if( checkEngine == 1): packet1[9] += 2; print packet1 @@ -472,13 +521,18 @@ class FordExperiments(experiments): if( fuelCap == 1): packet1[10] = 255 print packet1 - if( batter == 1): - packet1[6] = 33 + if( battery == 1): + packet1[7] = 33 print packet1 + if( dashB == 1): + packet1[6] = 255 + print "hello" + self.client.serInit() + self.spitSetup(500) # load new packet into TXB0 and check time self.multiPacketSpit(packet0=packet1,packet1=packet2, packet0rts=True,packet1rts=packet2rts ) starttime = time.time() - + print "starting" # spit new value for 1 second while ((time.time()-starttime) < 10): self.multiPacketSpit(packet0rts=True,packet1rts = packet2rts) @@ -797,6 +851,111 @@ class FordExperiments(experiments): while (time.time()-starttime < 1): self.multiPacketSpit(packet0rts=True) + def imbeethovenbitch(self): + + + ### USUAL SETUP STUFF ###### + self.client.serInit() + self.spitSetup(500) + self.addFilter([513, 513, 513,513]) + SIDlow = (513 & 0x07) << 5; # get SID bits 2:0, rotate them to bits 7:5 + SIDhigh = (513 >> 3) & 0xFF; # get SID bits 10:3, rotate them to bits 7:0 + + #clear buffers + self.client.rxpacket() + self.client.rxpacket() + self.client.rxpacket() + + + packet = None; + + #catch a packet to mutate + while (packet == None): + packet=self.client.rxpacket(); + newPacket = [SIDhigh, SIDlow, 0x00,0x00, # pad out EID regs + 0x08, # bit 6 must be set to 0 for data frame (1 for RTR) + # lower nibble is DLC + ord(packet[5]),ord(packet[6]),ord(packet[7]),ord(packet[8]),ord(packet[9]),ord(packet[10]),ord(packet[11]),ord(packet[12])] + + + # NOW THE FUN STUFF!!!!! + + music = wave.open("../../contrib/ted/beethovensfifth.wav.wav", 'r'); + print "number of frames: %d " %music.getnframes() + print "number of channels: %d " %music.getnchannels() + print "sample width: %d " %music.getsampwidth() + print "framerate: %d " %music.getframerate() + print "compression: %s " %music.getcompname() + + + numFramesToRead = music.getframerate()*.05 # grab .1s of audio + + while(1): + + runningSum = 0 + + sample = music.readframes(int(numFramesToRead)) # grab .1s of audio + + length = len(sample) + + for i in range(0, length,4): + runningSum += ord(sample[i]) #average the dual-channel + runningSum += ord(sample[i+2]) + + avg = math.fabs(runningSum/(length /2) -127) # we used 2 of every 4 frames, so divide length by 2 + if( sampNum > 0): + avg = (avg+avgprev)/2 + + val = int(avg*15 + 40) # normalize to speedometer range of values + + print "speedometerVal = %f " %val; + print "speed = %f" %(1.617*val-63.5) # speed we're trying to display + + if (val > 255): # ensure we don't run off acceptable range + val = 255 + elif (val < 0): + val = 0 + + newPacket[9] = int(val) # write it to the packet + + # load new packet into TXB0 and check time + self.multiPacketSpit(packet0=newPacket, packet0rts=True) + starttime = time.time() + + # spit new value for 1 second + while (time.time()-starttime < .1): + self.multiPacketSpit(packet0rts=True) + +# read in 26 frames +# average them +# normalize to our range of values (conversion 1.6167*x-63.5 +# x --> 0 to 120 + +#sample width = 2?? +#number of frames: 7133184 +#number of channels: 2 +#sample width: 2 --> 2 bytes per sample +#framerate: 44100 + + def engineDiagnostic(self, data): + + self.addFilter([513, 513, 513,513]) + + startTime = tT.time() + while((tT.time() - startTime ) < 15): + packet = None; + + #catch a packet to decode + while (packet == None): + packet=self.client.rxpacket(); + + rpm = 64.5 * ord(packet[5]) - 61.88 + mph = 1.617 * ord(packet[9]) - 63.5 + + data.put("Engine RPM: %d Current Speed: %d mph"%(rpm, mph)) + time.sleep(.5) + + @@ -810,7 +969,7 @@ if __name__ == "__main__": fakeVIN rpmHack ''') - parser.add_argument('verb', choices=['speedometerHack', 'rpmHack']); + parser.add_argument('verb', choices=['speedometerHack', 'rpmHack', 'thefifth']); parser.add_argument('-v', '--variable', type=int, action='append', help='Input values to the method of choice', default=None); @@ -824,5 +983,7 @@ if __name__ == "__main__": fe.rpmHack(inputs=inputs) elif( args.verb == 'fakeVIN'): fe.fakeVIN() + elif( args.verb == 'thefifth'): + fe.imbeethovenbitch()