Software Development [ROM] [CUSTOM] [PX5 "FYT" JOYING] gtx_fyt_px5_rom - FYT Android Head Units

========================================ACHTUNG===================
=================WARNING==========================================
================================================== ===PELIGRO=======
AS WITH ANY UNSUPPORTED SYSTEM MODIFICATIONS, USING THIS MAY LEAD TO A BRICK
IF YOU DON'T KNOW WHAT YOU ARE DOING ( HAVEN'T BRICKED MY SYSTEM YET! ) PLEASE
BE AWARE THAT NO ONE ON THE INTERNET IS RESPONSIBLE FOR ANY DAMAGE TO YOUR
UNIT. ANY PROBLEMS WILL BE CONSIDERED ACTS OF WHATEVER GOD YOU BELIEVE IN.
======PELIGRO================================================== =====
================================WARNING============================
===ACHTUNG================================================== =======
For ANY FYT SoM (6026) based Android FYT PX5 Head Unit!
​
Hello, here is a custom rom based on the SYU Stock Build 07_2018
Your Head Unit MUST ALREADY BE ROOTED! You must be able to obtain Super User access within Android!
stay tuned for more info!
really easy to work with, bootloader is unlocked, and doesn't require signed images. Xposed is working great, working on Magisk support.
--update 07/15
work on this rom has paused until I can afford to purchase another PX5 SoM... unforseen circumstances lead to the SoM being damaged =(

reserved versions

reserved Q/A

reserved twrp instructions

Development Notes:
*FYT_6026 is PIN COMPATIBLE with the FYT_6021 Intel SoFIA SoM
*USB Hub seems to be integrated into the PX5 SoC...there is no visible USB Hub IC on the SoM
*Using the RockChip SD Card Tools, you are able to create a bootable MicroSD card if the /recovery or /system partitions are not bootable
*Locking all 8 PX5 Cores to MAX frequency ([email protected] 1200Mhz, [email protected] 1500Mhz) results in the SoM temp to hit about 90C max. With a heatsink and fan, 40C max... Fastest Android Head Unit I have worked with to date in this mode.
*FYT_6026 does not require signed images...of anything, even the bootloader.
*FYT_6026 Boot Sequence:
1. Read sql6026update8 binary from boot media
2. sql6026update8 reads customercfg.txt, 6026lcdconfig.cfg, logo.bmp, updatecfg.txt, and config.txt files and applies parameters.
3. sql6026update8 then applies MCU updates if they are present in the root or MCU folders
4. sql6026update8 then writes to the Boot Control Block to reboot and launch the recovery binary in /sbin/recovery to begin the standard Android upgrade process. The file it looks for is 6026_8.zip
5. After 6026_8.zip is successfully processed, the recovery writes to the Boot Control Block again, this time to launch the sql6026update8 binary on boot and install the bundled applications from Allapp.pkg
6. Unit then is ready to reboot into the Android system.
*The sql6026update8 file can not be modified or replaced, the stock recovery verifies the checksum of this file.
*The stock rom has /system/bin/install-recovery which uses a patch file found in the root directory and patches the boot image to create and restore the recovery image on every boot, if it has been modified.
*Unlike the SoFIA units, the FYT_6026 does not output debug console output via the serial TX pins... (looking into this)
*FYT_6026 SoM features 2 SDIO interfaces. Only 1 SD card will work on units with this SoM, if they have multiple slots. One of the SDIO interfaces is used by the RTL8723DS WiFi/BT combo IC.

FYT_6026 SoM Photos:
SOM1:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
SOM2:
SOM3:
SOM4:
SOM5:
SOM6:
SOM7:
SOM8:
My unit:

gtxaspec said:
========================================ACHTUNG===================
=================WARNING==========================================
================================================== ===PELIGRO=======
AS WITH ANY UNSUPPORTED SYSTEM MODIFICATIONS, USING THIS MAY LEAD TO A BRICK
IF YOU DON'T KNOW WHAT YOU ARE DOING ( HAVEN'T BRICKED MY SYSTEM YET! ) PLEASE
BE AWARE THAT NO ONE ON THE INTERNET IS RESPONSIBLE FOR ANY DAMAGE TO YOUR
UNIT. ANY PROBLEMS WILL BE CONSIDERED ACTS OF WHATEVER GOD YOU BELIEVE IN.
======PELIGRO================================================== =====
================================WARNING============================
===ACHTUNG================================================== =======
For FYT SoM (6026) based JOYING / FYT PX5 units ONLY!
Hello, here is a custom rom based on the SYU Stock Build 07_2018
Your Head Unit MUST ALREADY BE ROOTED! You must be able to obtain Super User access within Android!
stay tuned for more info!
really easy to work with, bootloader is unlocked, and doesn't require signed images. Xposed is working great, working on Magisk support.
Click to expand...
Click to collapse
I may be game to test it. I'm running a unit sold by WITSON with the manufacturer in the MCU set to something like ZHAN. As far as I can tell it's FYT based so I guess that the ROM should work. Details below.
My concern is more related to whether CANBUS will work correctly after the upgrade. I'm running it in a Renault Koleos and have a CAN box on the harness and I want to be sure that I won't lose that functionality after the upgrade. I did see you mention in another thread that with the FYT units the CAN box simply converts the received messages into serial strings that are sent directly to the MCU. I would assume that there is some sort of a translator that spits out a standard set of serial strings regardless of what the original CAN ID was. E.g. steering wheel volume up could be CAN ID 0xABCD on my Koleos and something else on a VW but the serial string would always be 0x0123...etc... for that command. If this is indeed the case AND the MCU is not touched during the upgrade then I suppose that CANBus should continue working. That's my supposition at least... Interested to hear your thoughts before I go ahead with the test...
CPU: ARM Cortex-A53 eight-core 2+32 GB PX5; CPU: PowerVR G6110
Build: PX5-userdebug 8.0.0 OPR5.170623.007 eng.bsp.20180528.174007 test-keys
MCU: 2018-04-16 17:04:06 ZHAN_(NOR)__90_C9RD6686_CAN(A)PX5D1804160

looxonline said:
I may be game to test it. I'm running a unit sold by WITSON with the manufacturer in the MCU set to something like ZHAN. As far as I can tell it's FYT based so I guess that the ROM should work. Details below.
My concern is more related to whether CANBUS will work correctly after the upgrade. I'm running it in a Renault Koleos and have a CAN box on the harness and I want to be sure that I won't lose that functionality after the upgrade. I did see you mention in another thread that with the FYT units the CAN box simply converts the received messages into serial strings that are sent directly to the MCU. I would assume that there is some sort of a translator that spits out a standard set of serial strings regardless of what the original CAN ID was. E.g. steering wheel volume up could be CAN ID 0xABCD on my Koleos and something else on a VW but the serial string would always be 0x0123...etc... for that command. If this is indeed the case AND the MCU is not touched during the upgrade then I suppose that CANBus should continue working. That's my supposition at least... Interested to hear your thoughts before I go ahead with the test...
CPU: ARM Cortex-A53 eight-core 2+32 GB PX5; CPU: PowerVR G6110
Build: PX5-userdebug 8.0.0 OPR5.170623.007 eng.bsp.20180528.174007 test-keys
MCU: 2018-04-16 17:04:06 ZHAN_(NOR)__90_C9RD6686_CAN(A)PX5D1804160
Click to expand...
Click to collapse
Can you look at the file fyt.prop in /system/app and post the contents ? It will help as I am designing my custom app to detect the mcu ID and restore it on installation to avoid MCU mismatch errors that were present on the Sofia platform

gtxaspec said:
Can you look at the file fyt.prop in /system/app and post the contents ? It will help as I am designing my custom app to detect the mcu ID and restore it on installation to avoid MCU mismatch errors that were present on the Sofia platform
Click to expand...
Click to collapse
Sure. I'll see start I can do a little later today.

looxonline said:
Sure. I'll see start I can do a little later today.
Click to expand...
Click to collapse
Sorry, needed to make up a USB A to USB A cable to perform the temp root to get access to that folder but just never found the time this weekend. Will do it as soon as I can. Saw on the other thread that your PX5 is not so healthy anyway so looks like time is on my side.
Thanks for your efforts nonetheless bro!!! Hope that you have success with your unit.

work on this rom has paused until I can afford to purchase another SoM... unforseen circumstances lead to the SoM being damaged =(

gtxaspec said:
work on this rom has paused until I can afford to purchase another SoM... unforseen circumstances lead to the SoM being damaged =(
Click to expand...
Click to collapse
What's the damage on a new SoM?
Also I saw that the RK3368 which is the SoC has USB OTG on chip. Is that not the interface that the SoC uses if it needs to flash a binary onto the NAND? I saw somewhere in the MTC threads that they were using it but can't be sure that it's the same SoC. Will go double check later when I have time. We would just need a properly toasted SoM, a pinout of the SoC, a hot air station to remove the SoC, a continuity tester and then we could map out the USB OTG pins so that all others could recover their SoM in case of the same situation. Maybe worthwhile putting a shout out on the forums to see if anyone has a SOM that is toast and they are willing to donate to the cause.

gtxaspec said:
FYT_6026 SoM Photos:
SOM1:
SOM2:
SOM3:
SOM4:
SOM5:
SOM6:
SOM7:
SOM8:
My unit:
Click to expand...
Click to collapse
Ooh...the NAND on your SoM no longer has a small outline footprint...seems like they went BGA. That is going to make it very difficult to find the clock line to short it. Fortunately it's an eMMC and so there are only a few lines connected to it and it looks as if they are all exposed on the top layer. We would need to scrape off a bit of the solder mask and then scope each one during the initial boot stages to see which one has a consistent clock on it at the expected frequency. The datasheet for the eMMC is available via a google search where you can find the pin out. Re: the OTG, I still see the only way to find it as being to remove the SoC and buzz out the lines on the header assuming there is no series resistance in between. Could use the schematic for the MTC units to see how the comms are usually implemented but normally there is no series resistance, only esd protection in parallel.

Donate
gtxaspec said:
work on this rom has paused until I can afford to purchase another SoM... unforseen circumstances lead to the SoM being damaged =(
Click to expand...
Click to collapse
gtxaspec, I had your custom rom on my fyt6021 and it worked excelent.
I recently upgraded to the fyt6026 and I'm wating for you to finish your work on the custom rom for the fyt6026.
I appreciate your work very much and hope you can finish it soon, that's why I made a donation to Gran Turismo Enterprises so you will be able to buy an new SoM soon.
Keep up the good work!:good:
Thanks,
Hans

HHU68 said:
gtxaspec, I had your custom rom on my fyt6021 and it worked excelent.
I recently upgraded to the fyt6026 and I'm wating for you to finish your work on the custom rom for the fyt6026.
I appreciate your work very much and hope you can finish it soon, that's why I made a donation to Gran Turismo Enterprises so you will be able to buy an new SoM soon.
Keep up the good work!:good:
Thanks,
Hans
Click to expand...
Click to collapse
Agreed. Will be making a donation a little later today too. This man's efforts are appreciated.

HHU68 said:
gtxaspec, I had your custom rom on my fyt6021 and it worked excelent.
I recently upgraded to the fyt6026 and I'm wating for you to finish your work on the custom rom for the fyt6026.
I appreciate your work very much and hope you can finish it soon, that's why I made a donation to Gran Turismo Enterprises so you will be able to buy an new SoM soon.
Keep up the good work!:good:
Thanks,
Hans
Click to expand...
Click to collapse
Thank You! Much appreciated! The work that I do on these units, the countless hours spent debugging and reverse-engineering, really my hobby, and done for the community so everyone may get some enjoyment, instead of frustration, from our devices! I spend a lot of time driving, so for me it's personal. Thanks again!

Finally got around to donating too Efforts appreciated.

looxonline said:
Finally got around to donating too Efforts appreciated.
Click to expand...
Click to collapse
Me too!

gtxaspec said:
Can you look at the file fyt.prop in /system/app and post the contents ? It will help as I am designing my custom app to detect the mcu ID and restore it on installation to avoid MCU mismatch errors that were present on the Sofia platform
Click to expand...
Click to collapse
Finally managed to pull the contents of fyt.prop. Planning on investigating the SOM in a little more detail tomorrow to see if I can understand the hardware a little better.
Code:
px5:/system/app $ cat fyt.prop
#客户标识:fytmanufacturer
# fyt,mt,sh,zyc....
#
#字体大小:fytfontzise
# 0.8, 1.0, 1.15, 1.3
#
#动态壁纸:fytlivewallpaper
#com.bizhi.mogudongtai/com.zte.mobile.MushroomDay.WallpaperServiceMushroom
#
#输入法:inputMethod
#注音输入法:com.google.android.apps.inputmethod.zhuyin/.ZhuyinInputMethodService
#讯飞:com.iflytek.inputmethod.pad/.FlyIME
#
#未知来源开关:ro.rk.install_non_market_apps
#
sys_graphic.cam_dvp.deinterlace=false
ro.rk.install_non_market_apps=true
ro.build.fytmanufacturer=53
ro.build.fytfontsize=1
ro.build.fytlivewallpaper=
ro.fyt.uiid=2
ro.build.fytinputmethod=com.google.android.inputmethod.pinyin/.PinyinIME
ro.fyt.def.sb.radio=8
ro.fyt.def.sb.aux=4
ro.fyt.def.sb.player=4
ro.fyt.def.sb.tv=8
ro.fyt.usb_enable=1
persist.fyt.fy_radartofront=1
# 空 = 0;
#调试 = 1;
#深青联 = 2;
#青联同创= 3;
#悦歌 = 4;
#名途 = 5;
#众易畅 = 6;
#睿林 = 7;
#凯易德 = 8;
#普诚博安= 9;
#车行建 = 10;
#州信 = 11;
#莹隆 = 12;
#思百德 = 13;
#东琛 = 14;
#柯权 = 15;
#车美利 = 16;
#福帆达 = 17;
#卓奥通 = 18;
#博悦纵横= 19;
#格铭 = 20;
#佳艺田 = 21;
#卡百特 = 22;
#航韵 = 23;
#瑞宝 = 24;
#三一众合= 25;
#北箭 = 26;
#兴嘉林 = 27;
#欧华 = 28;
#康盛 = 29;
#方向通 = 30;
#爱影 = 31;
#派实达 = 32;
#凯振 = 33;
#飞音 = 34;

donating too...
thanks
by
kikan

Related

Android Tablet in car (bmw)

In the near future once an android tablet comes out that has GPS and dosnt cost me an arm and a leg i will be intergrating it into my bmw.
Since many tablets have usb host and on the web i can purchanse an ibus to usb adapter which people use when they make a car pc would this work with an android tablet? to control volume tracks and maybe even voice control/calls etc.
Does anyone know if anyone is working on the android software which would allow the tablet to recognise the ibus signal? this would be purfect for me.
Can anyone help?
I doubt that you'll get a helping answer soon, because there are not many people knowing about the IBUS.
For people who don't know what the IBUS is: It's a communcation bus used by BMW for controlling most of the cars electronics (light, radio, navigation system, electric window, ...). There are adapters for controlling all these things with a PC, so it should be possible to do this with an Android App.
But I'm affraid that there is none available at present. Also I think the app is not the only trouble: You'll need a working driver for your adapter, too.
So long
kadolf
Galaxy Tab. Since you have a Beamer I'm going to assume that you have some spare cash, the Galaxy Tab should have GPS, and I'm sure someone will make a car mount for it, or you could be the first .
If you havent gone to mp3car.com go there and check it out, ill be doing the same thing in my e36 pretty soon, although i have an external touch screen im going to try and link my g2 to
kadolf said:
I doubt that you'll get a helping answer soon, because there are not many people knowing about the IBUS.
For people who don't know what the IBUS is: It's a communcation bus used by BMW for controlling most of the cars electronics (light, radio, navigation system, electric window, ...). There are adapters for controlling all these things with a PC, so it should be possible to do this with an Android App.
But I'm affraid that there is none available at present. Also I think the app is not the only trouble: You'll need a working driver for your adapter, too.
So long
kadolf
Click to expand...
Click to collapse
Im sure that eventaully someone will create the drive/app for this. If i can use my phone with a bluetooth obd2 connector and rear my cars information on my phone surely what im asking is do-able.
cheers for the reply
mswiss said:
If you havent gone to mp3car.com go there and check it out, ill be doing the same thing in my e36 pretty soon, although i have an external touch screen im going to try and link my g2 to
Click to expand...
Click to collapse
My initial plan was to do that with my htc desire but unfortunatly it dosnt have tv out or usb host (OTG).
318vert said:
In the near future once an android tablet comes out that has GPS and dosnt cost me an arm and a leg i will be intergrating it into my bmw.
Since many tablets have usb host and on the web i can purchanse an ibus to usb adapter which people use when they make a car pc would this work with an android tablet? to control volume tracks and maybe even voice control/calls etc.
Does anyone know if anyone is working on the android software which would allow the tablet to recognise the ibus signal? this would be purfect for me.
Click to expand...
Click to collapse
old post, but i might be on the same wavelength as you, except with some changes.
android tablets will already do most everything you need, so my plan will be to ditch the head unit all together. in the spirit of the carPC and liliput touchscreens, my goal is to come up with a custom docking unity in the space of a double-din (which means i'll be required to use a 7 or 5in tablet). from there, the rest is relatively easy... or complicated.
the problem, so far, is i've yet to see any android tablets with a way to extract audio without using a headphone jack. so creating a docking station will be difficult in the sense of attempting to attach the audio.
so a couple things have been going through my mind;
1. you won't have to worry about power saving as much as a carPC. the tablet will be mostly safe to run off of the USB power (hooked directly to a 12v source) or maybe through a power inverter. removing the battery would eliminate concerns of dead battery, exploding battery from heat, etc., etc.
2. most built in FM tuners require the headphones to be attached to act as an attenna. can't be that hard to engineer the headphone component to work back into the car's radio antenna, it's just a matter if there's any benefit to be gained.
3. speaking of audio, once it's out of the device, it's just a matter of conditioning and amplifying the signal, which is all proven technology.
4. there's a huge probability that i'll skip an "in service" device in favor or a wifi only one, and then use tethering from my phone. still to be decided. i'd hate to add another cell line to my already high bill.
5. most, if not all, of the tablets will have some sort of hdmi out capability. attaching the device to external displays should be easy as pie. unfortunately, everyone will probably see what is on the main display, which may not be a problem. what might be a problem is accessing and using an SD card (of any size) to store movies, mp3s, etc. you're only so limited and it might be a little bit of a pita.
anyway, these were just some of my ideas. i know the interest is out there. the "dock" is going to be a little tricky. the tablet needs to be instantly accessible (easily removed), yet secure. i suppose you could fabricate something to where the audio cable is loose enough that you could attach it before docking.
Isn't Parrot working on single and double din headunits?
Sent from my Zio using XDA App
LiuAnshan said:
Isn't Parrot working on single and double din headunits?
Sent from my Zio using XDA App
Click to expand...
Click to collapse
are you talking about the android-driven HUs about to be released? from my understanding, they're just utilizing it as a core OS and not in the format you're used to on a phone, etc. similar to how Ford/BMW uses MS in their systems. i don't believe it'll have access to the market, which is a negative IMO.
the HUs might be sweet, in relation to what's available, but unless it's a dedicated tablet, i doubt you'll get the functionality you'd want to expect out of Android.
If you had a phone with usb host (OTG) then i would think we could just connect a MIMO Touchscreen monitor to it and use the released drivers for it and then we would all have what we want . here is some of what i have found that might help . Lets make this happen !!!!
http://sven.killig.de/android/N1/2.2/usb_host/
https://github.com/magoroku15/DisplayLink-driver-for-android
http://www.mimomonitors.com/
http://libdlo.freedesktop.org/wiki/
I would be interested in the hardware install aspect.
have anyone tried using the IOIO for android: http://www.sparkfun.com/products/10585
ypsmav said:
have anyone tried using the IOIO for android: http://www.sparkfun.com/products/10585
Click to expand...
Click to collapse
I'll bring this thread back to say that I have. Its an ongoing project but heres what I have so far:
http://www.youtube.com/watch?v=iBdQnFnXtgQ
any updated progress I have a 2007 335i and would be interested in getting a setup like this
Right now I'm working on making sure all of the commands work. Progress is slow since Java really isn't the best language for manipulating individual bytes (although that could also be my lack of experience). Unfortunately if you have a 335i, none of this will help you. I think all of the current generation of BMW's (those with iDrive) and most european cars for that matter use the MOST bus. This is based on a fiber optic physical layer. The supported transfer rates are in the 100's of MHz so you'd need more than a microcontroller to talk to it. That being said, if anyone wants to fund me for a couple weeks and lend me their iDrive equipped BMW, I'd be happy to crank something out
http://www.youtube.com/watch?v=80a-T37amdE
Howabout this... video looks cool... http://www.youtube.com/watch?v=80a-T37amdE
Also...
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Image stolen from here http://forum.e46fanatics.com/showthread.php?t=839753
TunaCanyon said:
I'll bring this thread back to say that I have. Its an ongoing project but heres what I have so far:
http://www.youtube.com/watch?v=iBdQnFnXtgQ
Click to expand...
Click to collapse
Hi TunaCanyon,
good to hear, that some other people are engaged with this topic.
I built a IBUS Bluetooth gateway half a year ago, last weekend I used to make the circuit look a bit more "professional"
I already built some piece of software based on the Bluetooth SPP example ("Bluetooth Chat") of Android SDK. It features logging ibus data (including simple packet recognition) and sending data to the ibus (with automatic checksum and length calculation). I just added CD changer emulation.
As I'm not experienced with Android programming and also didn't start with Java long ago, building a clean and working app is pretty hard for me, especially when it comes to services and threads... So after the easy datasheet reading and circuit routing part now the hard part follows.
Greetings,
kadolf

[DEV] Acer JTAG Pin Outs [WIP]

Hi All
I recently bricked my Acer A210 and it's running in APX mode. In a effort to bring it back to life i have been researching the jtag setup.
As you can see from this image, on the rigth hand side is JDBUG1, with pin 1 mark at the top.
Now this is a A510 in the image, but the same 10 pin connect is on my A210 and possibly on the A700,
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Now using many different tegra3 manuals and dev board guides i've reversed the jtag connector, well mostly, I've some more to confirm but i though i would put this out there in case any one has any thing to add, i will also upload as much info as i have and the pdf in case any one want to confirm my research,
Hopefully we can fix without $$$$ hardware.
I have a o'scope (30 years old crt based) ,arduino, buspirate, Open Source logic sniffer.
The latter two from dangerous prototypes, the main one i will use is the bus pirate in jtag mode.
I have already connected the buspirate up but no results i could rely on so i went back to research, here is what i've turned up ,
Code:
1 1.8v Tegra System Voltage
2 TRST (on A210 a 0R resistor is missing or 'un-stuffed' or not 'stuffed', see info about tying to gnd for CPU access )
3 10K to +v 1.8v for TDI
4 10K to +v 1.8v for TMS
5 100K to GND for TCK
6 10K to GND for RTCK (Return clock , see [URL="http://en.wikipedia.org/wiki/Joint_Test_Action_Group"]RTCK wiki[/URL] )
7 TDO (direct into CPU )
8 HOT_RESET (1.8v)
9 ON_KEY# (+5v )
10 GND
Now this information has been gleamed from many sources.
please see attached images for now, on the A210 the tracks are more exposed but I think its safe to assum the debug connector pin outs would be the same for the 3 devices,
EDIT** Ive found the A510 Schematic Online A510 Schematic - See Page 7 for JTAG
darkspr1te
<place holder for additional files>
Various Tegra(3) Files
Tegra Files / Manuals / PDFs ETC
Very interesting stuff, unfortunately my knowledge is not sufficient to contribute. But i'll definitely follow this topic, hope you can fix it.
Always an awesome moment went you succeeded "DIY" without spending big bucks.
herogjan said:
Very interesting stuff, unfortunately my knowledge is not sufficient to contribute. But i'll definitely follow this topic, hope you can fix it.
Always an awesome moment went you succeeded "DIY" without spending big bucks.
Click to expand...
Click to collapse
Yes, when We have that eureka moment and it works it's a great feeling, sadly I am not having that moment yet with the Acer. But I wont give up.
I am taking a break from the actual JTAG hacking part for Xmas and just to give myself a break from IT, I will return to the project in the new year.
Darkspr1te
What can we do with JTAG on our Acer Axxx ?
Envoyé de mon GT-I9505 en utilisant Tapatalk
imtheyoyo said:
What can we do with JTAG on our Acer Axxx ?
Envoyé de mon GT-I9505 en utilisant Tapatalk
Click to expand...
Click to collapse
We will be able to turn it into the most powerful tablet and take over the world *evil laugh*. Or we could recover our bricked tablets that are in apx mode like he said in post 1.
Sent from my A701 using Tapatalk
Hi All,
I've made some progress
Code:
> scan_chain
TapName Enabled IdCode Expected IrLen IrCap IrMask
-- ------------------- -------- ---------- ---------- ----- ----- ------
0 tegra3.arm Y 0x330173d7 0x330173d7 2 0x01 0x01
> jtag init
JTAG tap: tegra3.arm tap/device found: 0x330173d7 (mfg: 0x1eb, part: 0x3017, ver: 0x3)
> halt
Halt timed out, wake up GDB.
timed out while waiting for target halted
in procedure 'halt'
Cant get cpu to halt, could be due to many things, am i taking to the right core? it the jtag instructions i am sending the right ones for the arm/corex cores
right now, I dont know, most users dont document building the jtag instruction up so it's going to be new for me.
darkspr1te
Hi All,
I've made some progress
Code:
> scan_chain
TapName Enabled IdCode Expected IrLen IrCap IrMask
-- ------------------- -------- ---------- ---------- ----- ----- ------
0 tegra3.arm Y 0x330173d7 0x330173d7 2 0x01 0x01
> jtag init
JTAG tap: tegra3.arm tap/device found: 0x330173d7 (mfg: 0x1eb, part: 0x3017, ver: 0x3)
> halt
Halt timed out, wake up GDB.
timed out while waiting for target halted
in procedure 'halt'
Cant get cpu to halt, could be due to many things, am i taking to the right core? it the jtag instructions i am sending the right ones for the arm/corex cores
right now, I dont know, most users dont document building the jtag instruction up so it's going to be new for me.
EDIT** Seems what I am looking at here is the JTAG Route controller (similar to TI's ICEPICK router controller) but as I have not information yet on how to shift the router controller I am lost, Anyone got any input ?
for the ICEPICK it does the following commands to setup the router controller
Code:
# Utilities for TI ICEpick-C ... used in DaVinci, OMAP3, and more.
# jrc == TAP name for the ICEpick
# port == a port number, 0..15
proc icepick_c_tapenable {jrc port} {
# NOTE: it's important not to enter RUN/IDLE state until
# done sending these instructions and data to the ICEpick.
# And never to enter RESET, which will disable the TAPs.
# select router
irscan $jrc 7 -endstate IRPAUSE
drscan $jrc 8 0x89 -endstate DRPAUSE
# set ip control
irscan $jrc 2 -endstate IRPAUSE
drscan $jrc 32 [expr 0xa0002108 + ($port << 24)] -endstate DRPAUSE
irscan $jrc 0x3F -endstate RUN/IDLE
runtest 10
}
Now i dont know if the Tegra3 has it's own route controller an how it's programmed/setup
This is my first time into JTAG so it's a massive learning curve,
I am assuming that once i send the tegra3 the correct IRSCAN/DRSCAN jtag codes it will setup access in to the device further.
EDIT **
Some additional information I am still trying to understand/process, it's from tegra2 but one could assume it's valid for tegra3 as a lot of what i've turned up has been the case. This excludes security
based information
Code:
Note that in the circuit in Figure 24, there is an optional resistor on JTAG_TRST_N. For normal JTAG operation, this resistor
should not be present. The JTAG_TRST_N pin on the Tegra 250 selects whether the JTAG interface is to be used for
communicating with the Tegra 250 CPU complex, or for Test/Scan purposes. When JTAG_TRST_N is pulled low, the JTAG
interface is enabled for access to the CPU complex. When high, it is in Test/Scan mode.
When used in the normal operating mode to access the internal CPUs, in order to reset the Tegra 250 JTAG block, a reset
command is used rather than toggling the JTAG_TRST_N pin.
darkspr1te
imtheyoyo said:
What can we do with JTAG on our Acer Axxx ?
Envoyé de mon GT-I9505 en utilisant Tapatalk
Click to expand...
Click to collapse
Right now, with current public information, Nothing. But Who knows what it may turn up, access to SBK maybe? I dont know, I am not that level of expert, but it may turn up some interesting stuff. it may allow users to debrick devices (hopefully)
Let me start todays post off with a small request,
if anyone knows of a guide to using openocd/buspirate to investigate a jtag connection that is totally unknown then please post a link here,
I have read billions (well maybe dozens) of ducuments talking about boundry scans, config files, jtag route controllers but it seems almost none show you, they all are the same, they talk about in a vague way that your already ment to know what they are on about. Gah.
Anyway, i've ran some irscan/drscan commands and i've really got no where, i am confirming that keeping TRSRT high gives you the IDCODE of 0x330173d7 and if low then it errors out and you get all zeros,
ive found some tegra2 setup files for a jtag system called BDI-x0000 and they include a lot of info on the registers which are similar if not the same as tegra3, but the IDCODE is different and it's a different language to openocd, again plenty of documents hint at it being a simple conversion but i dont see it, maybe a case of 'cant see the wood for the trees' but it's not for noobs, which drives me a little insane,
Has anyone seen any docs of nexus 7 jtag ? i mean it's operation/setup not pin outs, i've got copies of that info but not actual irscan/drscan codes or anything.
Well I hope someone can provide a little input.
darkspr1te
Let me start todays post off with a small request,
if anyone knows of a guide to using openocd/buspirate to investigate a jtag connection that is totally unknown then please post a link here,
I have read billions (well maybe dozens) of ducuments talking about boundry scans, config files, jtag route controllers but it seems almost none show you, they all are the same, they talk about in a vague way that your already ment to know what they are on about. Gah.
Anyway, i've ran some irscan/drscan commands and i've really got no where, i am confirming that keeping TRSRT low gives you the IDCODE of 0x330173d7 and if high then it errors out and you get all zeros,
ive found some tegra2 setup files for a jtag system called BDI-x0000 and they include a lot of info on the registers which are similar if not the same as tegra3, but the IDCODE is different and it's a different language to openocd, again plenty of documents hint at it being a simple conversion but i dont see it, maybe a case of 'cant see the wood for the trees' but it's not for noobs, which drives me a little insane,
Has anyone seen any docs of nexus 7 jtag ? i mean it's operation/setup not pin outs, i've got copies of that info but not actual irscan/drscan codes or anything.
Well I hope someone can provide a little input.
darkspr1te
Click to expand...
Click to collapse
And i am double posting again.
After trying to deal with Acer to resolve the APX issue this is what hapnned
Code:
Sunil: Hi, my name is Sunil. How may I help you?
darkspr1te: hello
Sunil: Hello, darkspr1te.
darkspr1te: Hi Sunil, happy new year
darkspr1te: I have a Acer A210 that stopped booting, windows detects it as a Nvidia APX device
Sunil: Thank you and same to you.
Sunil: I am sorry to know about the issue.
Sunil: Do not worry. I will do my best to resolve the issue.
Sunil: I have the SNID number as 23203532115, is it correct?
darkspr1te: One sec let me double check
darkspr1te: yes that is correct
Sunil: Thank you for the confirmation.
darkspr1te: so what is the way forward ?
Sunil: In order to help you in a better way, please let me know the name of the country you reside now.
Sunil: Sure, I will help you in this regard.
Sunil: In order to help you in a better way, please let me know the name of the country you reside now.
darkspr1te: i am currently in Zambia, Ive tried for the past two weeks to get support from South Africa which is the closest agent to where I am, please dont tell me that i can only deal with them, they dont answer emails or live chat (i have screen shots and email logs to show this)
Sunil: I am sorry for that.
darkspr1te: so what is the way forward ?
Sunil: Your chat has come through to the Acer UK Support; hence, we are unable to assist with your enquiry.
We are able to assist UK customers with technical queries for products covered under warranty.
Sunil: Please click on the link below and select your country. You will then be directed to your local Acer website with the Service and Support section, containing contact details for your local Acer service centre.
Here is the weblink: http://www.acer.com/worldwide/support/
darkspr1te: Suni, ive tried that link, i've got nowhere, please I am begging you to help
Sunil: I completely understand your concern, darkspr1te. We are able to assist UK customers with technical queries for products covered under warranty.
darkspr1te: I am a uk customer, I carry a british passport, I can trace my family back 150 years in uk and I purchased the device in UK. what more do you need?
darkspr1te: I am only out of the country on work.
Sunil: darkspr1te, from our records, I see the unit is purchased in Zambia. We cannot pull any information of the unit.
darkspr1te: Thats impossible, I personally purchased it in Portsmouth , we have NO ACER agent or reseller here in Zambia
Sunil: I am sorry for that.
darkspr1te: Please I am begging you, just give me My Secure Boot key for the device that I purchased and own, i can deal with the rest my self
Sunil: Please be online for 2 minutes while I check the information on your query.
darkspr1te: thansk you
Sunil: Thank you.
Sunil: Thank you for staying online. I appreciate your patience.
Sunil: darkspr1te, please let me know the exact issue with the unit to assist you in a better way.
darkspr1te: The unit does not boot, it is only detectedd in windows as Nvidia APX device
Sunil: Alright.
darkspr1te: prior to that it rebooted while watching a movie and in the top left it said fastboot error
Sunil: Okay.
Sunil: darkspr1te, I have checked my records, We cannot come to a conclusion regarding the fault without the unit being physically diagnosed by the technician. I request you to contact South Africa Acer support for more information.
darkspr1te: Then can you please provide me with my Secure Boot key for the device so I can resolve the issue myself.
Sunil: I am so sorry, We do not have such information available.
Sunil: Is there anything else I may help you with?
darkspr1te: actually thats not true,I have a contact in uk who used to work with acer support and he said you can send a BCT config file which is keyed with my boot key and only usable on my device, sadly he left acer otherwise it would be him i would be talking to
Sunil: darkspr1te, If we had the options, we would have definitely helped you. we hope you can understand the situation.
darkspr1te: using the BCT file and nvidia NVFLASH i can fix my device in seconds
Sunil: We do not have such information available.
Sunil: I request you to contact South Africa Acer support for more information.
darkspr1te: then who does
Sunil: Is there anything else I may help you with?
darkspr1te: south africa HAVE NOT responded at all
Sunil: We are able to assist UK customers who reside in UK with technical queries for products covered under warranty.
darkspr1te: fine
Sunil: I request you to contact South Africa Acer support for more information.
Sunil: Is there anything else I may help you with?
darkspr1te: you're joking right ?
Sunil: darkspr1te, If we had the options, we would have definitely helped you. we hope you can understand the situation.
darkspr1te: No I dont understand, I dont know why I have a device that I cannot use because Acer is withholding the key to my own device
darkspr1te: you i had a nexus 7 with same tegra3 cpu and they gave me the secure key within a day of me reqquesting it
Sunil: darkspr1te, you have contacted Acer UK hardware technical support department and we do not have such information available with us. I request you to contact South Africa Acer support for more information.
Sunil: It was a pleasure working with you. Thank you for contacting Acer live chat. Have a nice day.
I will no longer recomend acer devices, I am pulling my github files for the acer as I dont want to be responsable for bricking someone else's device either. I just hope that someone at acer reads this and knows how useless chat/email support is.
darkspr1te
Another support agent in south africa, who after 3 hours of contant hello's finally answered.
Code:
Jacques: Hi, my name is Jacques. How may I help you?
darkspr1te: hello
darkspr1te: hello, is there anyone there
Jacques: yes can we help you?
darkspr1te: i have a acer A210 and it's not booting , i was watching a video and it rebooted, in the top left it said fastboot error and now windows only detects Nvidia APX device
Jacques: you will have to restore the operating system
darkspr1te: ok,
darkspr1te: how do i do that ?
Jacques: you can send it in for repair so we can reflash the device
darkspr1te: Jacques, I am currently not in a situation where that can be done, please I am begging you to assist me with my secure boot key so i can do it, I've sent two tablets to south africa in the past, first one stolen, second one came back still broken ( at the cost of the tablet), i cant afford the third.
darkspr1te: i know using nvflash and the BCT file thats linked to my secure boot key will fix the device
Jacques: we do not supply the files available for download on any of our sites , so to get assistance you will have to send it for repairs
darkspr1te: but I cant, please, i am begging.
darkspr1te: hello, are you still there
Jacques: I'm here
Jacques: unfortunately nothing more I can assist with as the files you looking for is not available for downbload
darkspr1te: Please Jacques, I am only asking for the key to my own device,
darkspr1te: i can give you the URL for acer Tiawan where acer support perrsonell get the key from
darkspr1te: but as i dont have a acer login account i cant get the key for my device
darkspr1te: if i had the key i can just use NVFLASH to fix in seconds
darkspr1te: all you need is the CPUID
darkspr1te: which is androidboot.serialno=015d256487300205
darkspr1te: ?
darkspr1te: are you still there
darkspr1te: hello
darkspr1te: hello
darkspr1te: hello
darkspr1te: anyone there ?
That was support in south africa
darkspr1te
Hi All,
i recently picked up this project again, I've got some new doc's and info but as yet no solution.
My current thinking is to attack the emmc, to which ive produced some photo doc's to upload.
In the first picture is the underneath of the emmc,
Red is CLK or clock
Yellow is CMD or command
light blue is VSS @ 1.8v
red border shows the outline of the emmc chip on the otherside of the pcb. see the picture called blend for a blended view of the same.
My current thinking is the emmc has failed or locked up, why ? well on the clock and cmd lines i get a nice clear trace on my logic sniffer and scope,
Now looking at the the picture called marked, look in the bottom right of the red box, those resistors more or less lighn up with the DAT0/7 pins but i do not get any signal at all from them with the scope. The system outputs CMD's down the CMD line to the emmc at power on, that and the clock can clearly be seen on the scope.
I have also referred to the a510 schema and emmc pins are ment to be the following on the T30 cpu
Dat0 - B6 (z = floating)
CLK - F8 z
CMD - H10 z
i have hunted around this area with the scope and found nothing.
from the SMARC sAT30 manual, it says the following for the EMMC
Either A:
DAT0 - K1 (pu = pull up)
CMD -N6 pu
CLK - M6 pu
or B:
DAT0 L27
CMD - J29
CLK - G30
both location have not shown either clk/cmd or a response from DAT0. Still more research to do.
last time i buy a tegra i can tell you. damn locked up piece of sh!t.
darkspr1te
Edit: I forgot to add the specs for the EMMC
Samsung KLMAG2GE4A
PDF attached
Futher reading ont this emmc at ps3wiki http://www.psdevwiki.com/ps3/KLMAG2GE4A-A001
More pictures Of EMMC
Final group of pictures
WTF! That eMMC is really blank! Do you have any info on that? Can you do anything to it's surface to see what it says?
Also, on the OP schematics there's a "UART debug" port. What's on that?
I am having a similar issue using JTAG on a Tegra 2 device.
Would it possible for you to post the Tegra 2 documentation you have?
darkspr1te said:
EDIT **
Some additional information I am still trying to understand/process, it's from tegra2 but one could assume it's valid for tegra3 as a lot of what i've turned up has been the case. This excludes security
based information
Code:
Note that in the circuit in Figure 24, there is an optional resistor on JTAG_TRST_N. For normal JTAG operation, this resistor
should not be present. The JTAG_TRST_N pin on the Tegra 250 selects whether the JTAG interface is to be used for
communicating with the Tegra 250 CPU complex, or for Test/Scan purposes. When JTAG_TRST_N is pulled low, the JTAG
interface is enabled for access to the CPU complex. When high, it is in Test/Scan mode.
When used in the normal operating mode to access the internal CPUs, in order to reset the Tegra 250 JTAG block, a reset
command is used rather than toggling the JTAG_TRST_N pin.
darkspr1te
Click to expand...
Click to collapse
Tom_Perman said:
I am having a similar issue using JTAG on a Tegra 2 device.
Would it possible for you to post the Tegra 2 documentation you have?
Click to expand...
Click to collapse
I can tell that you will find the most useful docs via baidu
also search for terga2 and terga3, some docs were misspelled.
I will post any documentation i've created if I can find it, i've recently moved a lot of data to archive that i was not working on, the acer stuff was among it .
How far along are you jtag wise? any comms with the chips ?
darkspr1te
Tom_Perman said:
I am having a similar issue using JTAG on a Tegra 2 device.
Would it possible for you to post the Tegra 2 documentation you have?
Click to expand...
Click to collapse
Do you have a photo with your JTAG connection? which acer is it?

General joying 13.3 inch tesla style headunit

Hi everyone,
I just received this headunit from joying that's running Intel sc9853i chipset with 4gb of ram and android 8.
In order to get it I had to email joying directly at
[email protected]
I have to say this is the best unit I've ever used. And I have used a LOT of headunits including px3, Px5, PX6, ownice, and even most recently another tesla style headunit using rock chip.
The hardware is solid and clearly high quality.
The software is not bloated like all the other headunits. Google Hotword works out of the box. Same with google maps, calls and bluetooth connections. .
The steering wheel keys are detected immediately and it even gives the steering wheel code right at the top of the app which allows for multiple different options for app launches including google voice.
The unit auto sleeps and wakes from sleep immediately with no issues.
4G works right out of the box with tmobile us sim card.
The instructions come with the actual password for the factory settings screens and developer options screen which allows you to change the boot logo.
Audio is...pretty good. It's definitely better than other units I've used and the equalizer allows for changes that I can hear. I'm no audiophile but even I can tell that the audio quality is much better than headunits mentioned above.
I can honestly say I love that all of the bugs and problems with past headunits seem to be resolved for me in this unit.
If I could make any changes it would be with the hardware where the screen interfaces with the headunit. Because it's an auto-rotating headunit (which is more gimmicky than anything honestly) the screen itself is flush and not very adjustable up and down..this means I have to have the whole unit moved forward to mount in my dash as my car has an angled dashboard. Not a big deal by any means but a minor annoyance.
I hope this helps anyone looking to buy these units.
Let me know if you have questions!
Great to see Joying is releasing new units with motorized rotation.
I am a bit sad that the ratio is 16:9 instead of a more usable 16:10.
I am very sad that it's using the Unisoc / Speadtrum / Intel Airmont SC9853i (released Q2 2017) instead of the Tiger T618 or T710 from 2019.
Also, a new unit released with Android 8.1.. Really!? Android 11 beta has already been released.
I know Joying more of an assembler and not really a manufacturer and has little to no access to the source code of the software / firmware their products run. One would hope that they could "encourage" their supplier of coreboards (the pre-built board with processor / firmware) they all use to produce something more modern.
I am in the market for a new stereo for my car and purchased a Joying unit years ago. It's too slow for me now and I want to upgrade, but buying 4 year old product for top dollar is not something I am likely to do.
Did your unit come with the DSP chip for proper EQ adjustment? Many of the assemblers do not include the DSP chip to cut down on costs.
For those that aren't interested in the rotation perhaps this is a better unit for you: Joying 10.1" 1280x800 no rotation
How much did you pay for it?
And is it 1-DIN or 2-DIN size?
I am in the process of buying a 13-inch rotating headunit and it's either going to be this Joying unit or some other Chinese unit.
The Joying has the latest Intel CPU, SPDIF out but is Android 8 and 2-DIN.
The other one has the PX6, no SPDIF out, but has Android 9 and is 1-DIN, which I prefer because it will allow me to fit it an inch higher in the dashboard.
What do you notice more in real life, the Intel CPU vs. the PX6 or Android 9 vs. 8?
skewty said:
Did your unit come with the DSP chip for proper EQ adjustment? Many of the assemblers do not include the DSP chip to cut down on costs.
Click to expand...
Click to collapse
Yes dsp chip. But as I understand it dsp is a pretty deep field in which I don't know very much. I don't know if this answers your question but I am able to change eq settings for individual speakers at I think 11 channels..let me know if there's some way I can answer your question better than that.
Flavio said:
How much did you pay for it?
And is it 1-DIN or 2-DIN size?
Click to expand...
Click to collapse
499 USD
2-din
Flavio said:
I am in the process of buying a 13-inch rotating headunit and it's either going to be this Joying unit or some other Chinese unit.
The Joying has the latest Intel CPU, SPDIF out but is Android 8 and 2-DIN.
The other one has the PX6, no SPDIF out, but has Android 9 and is 1-DIN, which I prefer because it will allow me to fit it an inch higher in the dashboard.
What do you notice more in real life, the Intel CPU vs. the PX6 or Android 9 vs. 8?
Click to expand...
Click to collapse
100% the joying intel cpu is waaaay faster and has much fewer bugs than the PX6.
skewty said:
Great to see Joying is releasing new units with motorized rotation.
I am a bit sad that the ratio is 16:9 instead of a more usable 16:10.
I am very sad that it's using the Unisoc / Speadtrum / Intel Airmont SC9853i (released Q2 2017) instead of the Tiger T618 or T710 from 2019.
Also, a new unit released with Android 8.1.. Really!? Android 11 beta has already been released.
I know Joying more of an assembler and not really a manufacturer and has little to no access to the source code of the software / firmware their products run. One would hope that they could "encourage" their supplier of coreboards (the pre-built board with processor / firmware) they all use to produce something more modern.
I am in the market for a new stereo for my car and purchased a Joying unit years ago. It's too slow for me now and I want to upgrade, but buying 4 year old product for top dollar is not something I am likely to do.
Did your unit come with the DSP chip for proper EQ adjustment? Many of the assemblers do not include the DSP chip to cut down on costs.
For those that aren't interested in the rotation perhaps this is a better unit for you: Joying 10.1" 1280x800 no rotation
Click to expand...
Click to collapse
I'm currently working on video reviews of this unit. Thus far I've gotten the unboxing and install videos done, hoping to have reviews out in the next week or two; they take a surprisingly long time to shoot and edit.
Unboxing: https://youtu.be/h__Zc0fwOtw
Install: https://youtu.be/Xq1FvLoKESo (This unit turns out to be too big for my car's dashboard and no head units really fit well in the car because of the deep recessed design.)
Just confirmed with Joying, they have now implemented the 13.3inch head unit with Android 10. Can purchase it through joyingauto.eu/china-post-shipping-fee.html
Thank me guys, I ordered one this morning and talked the price down from $500.
The new unit has the UIS7862 CPU by the way.
Now I need to find a suitable Canbus cable for my 2015 Mitsubishi Outlander. Any suggestions are welcome. I am in the Netherlands by the way.
Flavio said:
Thank me guys, I ordered one this morning and talked the price down from $500.
The new unit has the UIS7862 CPU by the way.
Now I need to find a suitable Canbus cable for my 2015 Mitsubishi Outlander. Any suggestions are welcome. I am in the Netherlands by the way.
Click to expand...
Click to collapse
How much did you pay? was it the 13.3inch display with android 10?
I am getting the 13.3-inch Android 10 version and I paid EUR 425.00 including shipping to the Netherlands.
I finally installed the headunit today in my 2015 Mitsubishi Outlander PHEV with the OEM Rockford Fosgate amplifier.
I used this cable: https://connects2.com/Product/ProductItem/CTKMT11
But I can't get any sound.
I think it might have something to do with the Canbus type setting in the hidden settings menu, but I have no idea which one to select.
Also should I set the option for External Amplifier on or off?
I've read elsewhere they chose Singapore in the canbus settings and it worked
That's a pretty massive screen. Are you able to turn the brightness down enough at night so that you aren't blinded?
Flavio said:
I finally installed the headunit today in my 2015 Mitsubishi Outlander PHEV with the OEM Rockford Fosgate amplifier.
I used this cable: https://connects2.com/Product/ProductItem/CTKMT11
But I can't get any sound.
I think it might have something to do with the Canbus type setting in the hidden settings menu, but I have no idea which one to select.
Also should I set the option for External Amplifier on or off?
Click to expand...
Click to collapse
External on - I would think (if you have the Rockford amp)
Did your original have GPS ,?
The black box part of your cable has to be correct, you most likely have the wrong one and the amp is not being turned on.
The Mitsubishi units are a pain from what I've read
Possibly aerpro Mito-02 cable or CHMB4C patch cable
Check which is suitable for the outlander
Contact joying ? You might need the canbus cable. Definitely on older cars
I gave up tryi9ng to get the adapter cable working with the OEM Rockford Fosgate amplifier. The manufacturer wanted me to send it back for reprogramming without any assurance that it would work after that.
I have now fitted an Awave DSP-6 DSP amplifier that gets the signal from the headunit through optical out. I have fitted a 3-way set in the front doors and on the dash.
So yesterday was actually the first day I could use the Joying headunit.
It is still buggy with various apps repeatedly closing and several time the stock launcher refuses to show the app drawer. I have installed Nova Launcher.
One thing I can't figure out is the split screen function. With such a large display this would be very convenient. What am I doing wrong?
Flavio said:
One thing I can't figure out is the split screen function. With such a large display this would be very convenient. What am I doing wrong?
Click to expand...
Click to collapse
You don't tell us what you already tried. Always do that first! I am now risking to spend my precious time on something you already tried.
Also: All the default Joying (FYT) apps like music, radio, video, settings, etc. do NOT function in split screen as those stupid apps don't support it. Their screen layout is still based on android 1.6 and has never been changed. Therefore they can't use the multi-window feature of Android 7+.
Anyway: If you have two apps started, like your nav app and your (non-FYT/Joying) media player, you go to the rectangle in the top-right of your notification bar. If you tap it, you see the active and last used apps.
Tap & hold your desired app. On both left and right side of the screen you will see two grey areas (after 1-2 seconds). Draw the app to either the left or right area. Then select the other app for your splitscreen display.
Alternatively: If you use the touch-assistant (the little white dot normally in the top-left), you can tap it. One of the options is to start split-screen as well.
This has also been described in #19 of my SC9853i Q&A thread.
Obviously as a long time XDA member I tried this already...
I just got word from Joying that the split screen function is not supported on this Joying model.
Flavio said:
I just got word from Joying that the split screen function is not supported on this Joying model.
Click to expand...
Click to collapse
Indeed . You have a screen the size of a cinema screen and you can't use split screen. Unbelievable.
And they really show a split-screen on their website !!!
I would really request (part of) my money back
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Edit: They show an apple iphone screen via Carplay. What a frauds!
Split Screen issue solved. I am using this app for it:
Split Screen Shortcut - Apps on Google Play
Add shortcuts to trigger Android's split-screen mode.
play.google.com
The long press activation does not work, but the floating button does.

Question Mekede /Navifly 7862 CAN code.

Hi.
Can any of you add modified CAN codes to the 7862 radio? I have a Peugeot 308 SW car. Unfortunately, it is not on the car list. I am currently using the setting for the Peugeot 408. But not all functions are working. The steering wheel rotation codes that are used for the moving guide lines for the rear view camera are missing.
depends who is the manufacturer of the decoder, however try XP, or OD or check all, Android Settings > Car settings > Factory settings (password: 126) > Canbus tab > Select the manufacturer of your canbus decoder and the car model, or select the closest match if you cannot find exact model, e.g. volvo xc90 not on list but xc60 available. I hope it make sense.
I'm working on an open source CAN bus box for these sort of situations. The idea is that it fits exactly into the connector for the existing standard CAN bus boxes all these units use (so it will work for PX5/PX6/intel/UIS7862 etc). I've had a similar problem with my Audi A3, where the button functions are incorrect and unchangeable. My car also has an OLED display on the gauge cluster which doesn't show anything useful without the stock head unit (my primary motivation for this project). I'll make a more detailed post about it here once it's working smoothly in my car. For now I'm still working out a few hardware and software kinks, especially since I also need it to control my external DAC and gauge display.
To configure it for your car you will need to know the CAN bus communication rate, as well as the packet ID and bits changed for the following functions:
ACC on
Park
Reverse
Headlight/interior illumination brightness
Optional:
Steering wheel buttons (if you want SWC)
Dashboard display (if you have one - mine operates as 1 line 20 characters in my preferred configuration)
Interesting parameters to monitor (fuel consumption, temperature, instantaneous speed, etc)
I'd also suggest being familiar with modifying Arduino code to change the packet values as I won't modify it for anything other than my Audi A3 8P. The way this data is coded can vary quite a lot car to car - for example in mine the brightness is coded as an integer from 0-100. You'll also need a way to solder the parts.
JLCPCB is insanely cheap for ordering boards if you're a new customer, and the rest of the components cost ~$30. I may build and sell some of my extra boards if there's interest, but I won't be providing any software besides for my Audi A3 8P. I'll update within the month, as I don't anticipate needing to change anything this point besides software, but only have 1 day a week to dedicate time to this project so progress has been slow.
Daro101 said:
Salut.
Poate cineva dintre voi adăuga coduri CAN modificate la radio 7862? Am o mașină Peugeot 308 SW. Din păcate, nu este pe lista de mașini. În prezent folosesc setarea pentru Peugeot 408. Dar nu toate funcțiile funcționează. Codurile de rotație ale volanului utilizate pentru liniile de ghidare mobile ale camerei de vizualizare din spate lipsesc.
Click to expand...
Click to collapse
Hi try these:
8888
6789
7890
3368
3369
1617
1618
1688
and the list can continue to check on these and let you know if it was helpful
Salut incearcale pe astea:
8888
6789
7890
3368
3369
1617
1618
1688
si lista poate continua verificale pe astea si anuntama daca ti fost de ajutor
COASTER19 said:
I'm working on an open source CAN bus box for these sort of situations. The idea is that it fits exactly into the connector for the existing standard CAN bus boxes all these units use (so it will work for PX5/PX6/intel/UIS7862 etc). I've had a similar problem with my Audi A3, where the button functions are incorrect and unchangeable. My car also has an OLED display on the gauge cluster which doesn't show anything useful without the stock head unit (my primary motivation for this project). I'll make a more detailed post about it here once it's working smoothly in my car. For now I'm still working out a few hardware and software kinks, especially since I also need it to control my external DAC and gauge display.
To configure it for your car you will need to know the CAN bus communication rate, as well as the packet ID and bits changed for the following functions:
ACC on
Park
Reverse
Headlight/interior illumination brightness
Optional:
Steering wheel buttons (if you want SWC)
Dashboard display (if you have one - mine operates as 1 line 20 characters in my preferred configuration)
Interesting parameters to monitor (fuel consumption, temperature, instantaneous speed, etc)
I'd also suggest being familiar with modifying Arduino code to change the packet values as I won't modify it for anything other than my Audi A3 8P. The way this data is coded can vary quite a lot car to car - for example in mine the brightness is coded as an integer from 0-100. You'll also need a way to solder the parts.
JLCPCB is insanely cheap for ordering boards if you're a new customer, and the rest of the components cost ~$30. I may build and sell some of my extra boards if there's interest, but I won't be providing any software besides for my Audi A3 8P. I'll update within the month, as I don't anticipate needing to change anything this point besides software, but only have 1 day a week to dedicate time to this project so progress has been slow.
Click to expand...
Click to collapse
Hi @COASTER19 .
Thanks for posting about this, always good to hear about real development work.
I for one would be very interested to read more about your project, would you consider posting more information.
Also, there is another thread discussing similar work you may not be aware of, so have posted here.
CANBOX , CAN decoder reverse engineering
Hi All, I have a PX5 radio that was supplied with fittings for 2006 Toyota RAV4 , sadly it didnt come with a CANBOX and supplier was not able to provide one that matched, I managed to get my hands on a Canbox for VW unit and decided to reverse...
forum.xda-developers.com
hi all, i am new here and thinking to buy navifly HU
I have one question, dose the unit support climate control for AC? can I control my AC from unit?
The other question, can i add 360 cameras system?
Thansk
amin111111111 said:
hi all, i am new here and thinking to buy navifly HU
I have one question, dose the unit support climate control for AC? can I control my AC from unit?
The other question, can i add 360 cameras system?
Thansk
Click to expand...
Click to collapse
It depends on whether your car exposes CAN-bus to the head unit and whether the provided CAN-bus box supports it. Generally, the answer is no unless specifically mentioned in the listing text. Navifly support doesn't speak good English, so I wouldn't expect a correct answer from them.
@marchnz I posted an early demo of the project on Youtube and have attached the latest schematic to this post.
I'll start a thread in a few more weeks once I get the optical audio working, but the current board layout probably needs another revision before then. I had to use a rotary tool to cut part of the board so the connector could physically fit. CANBOX looks interesting, but also works very differently from what I'm doing. I'll look into it more once I have a fully functional stereo again, as I'm definitely interested in trying to get some of those functions running.
COASTER19 said:
It depends on whether your car exposes CAN-bus to the head unit and whether the provided CAN-bus box supports it. Generally, the answer is no unless specifically mentioned in the listing text. Navifly support doesn't speak good English, so I wouldn't expect a correct answer from them.
@marchnz I posted an early demo of the project on Youtube and have attached the latest schematic to this post.
I'll start a thread in a few more weeks once I get the optical audio working, but the current board layout probably needs another revision before then. I had to use a rotary tool to cut part of the board so the connector could physically fit. CANBOX looks interesting, but also works very differently from what I'm doing. I'll look into it more once I have a fully functional stereo again, as I'm definitely interested in trying to get some of those functions running.
Click to expand...
Click to collapse
Fantasic work, really like the approach to steering wheel keys.
What is selected for CANBus type on the unit to enable the split between analog steering wheel, Illumination, ACC and vehicle specific CANBus signaling say from car doors, AC etc?
I am very interested in making one and having a go at modifying the software for Toyota specific vehicles, if you're comfortable with releasing and commenting the source? Understand if you're not though
Great video. Thanks again for contributing to real development. Your work deserves its own thread!
Illumination, ACC state, Park state, and Reverse are just +12v signals onto wires. Normally, everything else happens over the serial communication, but in my case I use KEY1/KEY2 with selectable resistors for SWC.
Vehicle specific stuff such as reverse radar sensors, climate control, and door status would require reverse engineering the head unit's 2 wire serial protocol. Luckily it does appear at first glance that the protocol is the primary focus of the CANBOX project.
If there's a way to select an app to open over that serial connection it would be really convenient, but I don't think that's an option discovered yet. It would allow the mode carousel to be controlled entirely from the microcontroller which would be great. I loved how HAL9k's ROM on my PX6 allowed me to customize this, but my PX6 ran incredibly slow for some reason (20+ seconds to open maps). The 7862 is far nicer hardware despite the unpolished software, so the preferable option to me. Optical audio output is also great compared to the noise in both the PX6 and 7862 amps.
Ok. Couldn't find problem like mine. After starting car my dashboard HUD is in Chinese. Can't find anything like original radio settings to change it. Any ideas?
KDPD said:
Ok. Couldn't find problem like mine. After starting car my dashboard HUD is in Chinese. Can't find anything like original radio settings to change it. Any ideas?
Click to expand...
Click to collapse
Use phone and Google translate to get to language menu?
marchnz said:
Use phone and Google translate to get to language menu?
Click to expand...
Click to collapse
Will use opcom to do that as navifly 7867 doesn't have setting for that inbuilt. Lots of cd400 radio settings are gone. Thanks.
KDPD said:
Will use opcom to do that as navifly 7867 doesn't have setting for that inbuilt. Lots of cd400 radio settings are gone. Thanks.
Click to expand...
Click to collapse
I dont know what that has to do with using translate on your phone to find the language menu on your head unit, but if that spins your wheels.
marchnz said:
I dont know what that has to do with using translate on your phone to find the language menu on your head unit, but if that spins your wheels.
Click to expand...
Click to collapse
That means I can't change settings from head unit as that setting doesn't exist. It's not head unit language I'm talking about, it's dashboard display.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
So using Google translate is impossible, hence I mentioned that opcom is needed.
With the Google translate app on a phone, you can use your camera to point to the text and translate it.
Perhaps you can use that to navigate to your dashboard settings to change the language?
Don't know if such a setting exists, though...try it and let us know.
Edit:
So, if with your previous head unit, that's where the language settings were found and not directly through another method, then the head unit that replaced the factory head unit should provide those functions.
For the TEyes CC2 and CC3, once the proper Canbus setting is specified, I believe there is a Car Info app or something similar, that provides access to vehicle specific functions/settings. For the CC2, which I have, there are additional menus that are available in the normal settings when you specify a Canbus adapter. Have a look around your settings to see if you can find anything like this.
Question...did this just start happening or is this the first time with the head unit and the Chinese text in the dashboard is showing up?
Question...have the head unit language settings been set to the proper language?
mastrv said:
With the Google translate app on a phone, you can use your camera to point to the text and translate it.
Perhaps you can use that to navigate to your dashboard settings to change the language?
Don't know if such a setting exists, though...try it and let us know.
Edit:
So, if with your previous head unit, that's where the language settings were found and not directly through another method, then the head unit that replaced the factory head unit should provide those functions.
For the TEyes CC2 and CC3, once the proper Canbus setting is specified, I believe there is a Car Info app or something similar, that provides access to vehicle specific functions/settings. For the CC2, which I have, there are additional menus that are available in the normal settings when you specify a Canbus adapter. Have a look around your settings to see if you can find anything like this.
Question...did this just start happening or is this the first time with the head unit and the Chinese text in the dashboard is showing up?
Question...have the head unit language settings been set to the proper language?
Click to expand...
Click to collapse
Issue is. Supplier sells unit with CANBUS for generic GM as Chevrolet to European cars such as Opel Astra. Settings for canbus is GM/Cruze/cruze_manual, and kinda covers most of ECUs. In settings under 3368, settings for language don't exist. It covers basic personalisations, lights and doors, not nothing like that. At the moment decoder is by HiWorld. I got GM compatible one from Rise but don't know how to force unit to recognise it. When I connected it in canbus settings i couldn't na choose Rise. So I got an OBD OPcom/vauxcom and will change language trough that. But thanks for the tip with translate. I know that display by memory, it's just annoying to see avarage consumption as bunch of lines putted together.
KDPD said:
Problem jest. Dostawca sprzedaje jednostkę z CANBUS dla generycznego GM jako Chevrolet do europejskich samochodów, takich jak Opel Astra. Ustawienia dla canbus to GM/Cruze/cruze_manual i w pewnym sensie obejmują większość ECU. W ustawieniach poniżej 3368 ustawienia języka nie istnieją. Obejmuje podstawowe personalizacje, oświetlenie i drzwi, a nie nic takiego. W tej chwili dekoder firmy HiWorld. Dostałem kompatybilny z GM od Rise, ale nie wiem, jak zmusić jednostkę do rozpoznania go. Kiedy podłączyłem go w ustawieniach canbus, nie mogłem wybrać Rise. Więc mam OBD OPcom/vauxcom i przez to zmienię język. Ale dzięki za wskazówkę z tłumaczeniem. Znam to wyświetlanie z pamięci, po prostu denerwujące jest widzieć średnie zużycie jako kilka połączonych linii.
Click to expand...
Click to collapse
Your problem is very simple to solve. Just go to the "Vehicle Settings" tab and there is an option to change the language. I will try to send the photo as soon as possible.
Tomaso84 said:
Your problem is very simple to solve. Just go to the "Vehicle Settings" tab and there is an option to change the language. I will try to send the photo as soon as possible.
Click to expand...
Click to collapse
Well, there is no setting for an language for dashboard of the car. only for the language of the HUD. but thanks. im trying to get update from manufacturer.
At first, my car spoke Chinese too. Managed to change on the menu
Tomaso84 said:
At first, my car spoke Chinese too. Managed to change on the menu
Click to expand...
Click to collapse
Well.... It's not that easy on my unit. Or maybe decoder is wrong. Basically no language setting. And most of settings are empty screens. Canbus is set as a Chevrolet Cruze. I have a second "Opel" canbus unit but not sure how to connect it. Does it require reset if the HUD or is it plug and play?

Question Mercedes SLK canbus decoding problem

Hello.
I wanted to ask a question about Mercedes can bus decoding boxes.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
I have always had many problems with one of my cars, with the Can Bus decoding. There are functions that do not work, or do it wrongly. Maybe it's that my car is a bit strange (SLK-350 R171, 2008 year), because other Mercedes models (example: A-Class w169, 2009 year) I don't see any problem.
I think the problem is in the firmware of the can bus decoder boxes. I have several boxes, from various manufacturers (HF, GS...), and some work better than others, but none do it correctly.
But I note that they all have very old manufacturing years, or firmware versions that are also old.
I would like to buy a specific modern box for Mercedes SLK, but I can't find one. Or at least, the most modern if possible. Some online stores have decoder boxes but when asking about the hardware or firmware version, they play crazy and don't answer you.
I have found photos on the internet, with V8 2020 year versions, but no store that I have contacted informs you of the version they have.
Does anyone know where to buy a modern Mercedes canbus decoder?
I have not even found the website of the manufacturers of these boxes, to see what versions they are currently working with.
Another question.
Is there any way to update the canbus file of a FYT uis7862 MEKEDE? Maybe only updating this file can solve the problem, because in the canbus configuration of the radio, SLK version does not appear and I have to configure with B200 Class
3PI said:
Hello.
I wanted to ask a question about Mercedes can bus decoding boxes.
View attachment 5915593
I have always had many problems with one of my cars, with the Can Bus decoding. There are functions that do not work, or do it wrongly. Maybe it's that my car is a bit strange (SLK-350 R171, 2008 year), because other Mercedes models (example: A-Class w169, 2009 year) I don't see any problem.
I think the problem is in the firmware of the can bus decoder boxes. I have several boxes, from various manufacturers (HF, GS...), and some work better than others, but none do it correctly.
But I note that they all have very old manufacturing years, or firmware versions that are also old.
I would like to buy a specific modern box for Mercedes SLK, but I can't find one. Or at least, the most modern if possible. Some online stores have decoder boxes but when asking about the hardware or firmware version, they play crazy and don't answer you.
I have found photos on the internet, with V8 2020 year versions, but no store that I have contacted informs you of the version they have.
Does anyone know where to buy a modern Mercedes canbus decoder?
I have not even found the website of the manufacturers of these boxes, to see what versions they are currently working with.
Another question.
Is there any way to update the canbus file of a FYT uis7862 MEKEDE? Maybe only updating this file can solve the problem, because in the canbus configuration of the radio, SLK version does not appear and I have to configure with B200 Class
Click to expand...
Click to collapse
Unfortunately I'm new to this sphere so can't speak on most of the questions you have, i can say though that my unit has a built-in app store (some generic store), Most of the app doesn't seem to operate/connect...But it has one tab (System i think its called) that is showing me updates (that i haven't ran yet, but appear there)
Maybe you have a similar app w/update pending......
louforgiveno said:
Unfortunately I'm new to this sphere so can't speak on most of the questions you have, i can say though that my unit has a built-in app store (some generic store), Most of the app doesn't seem to operate/connect...But it has one tab (System i think its called) that is showing me updates (that i haven't ran yet, but appear there)
Maybe you have a similar app w/update pending......
Click to expand...
Click to collapse
Note though that this (possible) Canbus upgrade, is the Canbus apk on the unit. Not the firmware inside the Canbus decoder.
The apk is also regularly updated. It really is a huge amount of if..then..else statements per car and canbus type, where new functionalities are added if canbus decoders get newer firmware on delivery of new units.
3PI said:
I have not even found the website of the manufacturers of these boxes, to see what versions they are currently working with.
Click to expand...
Click to collapse
I know some of the websites of a few canbus boxes but none of them list individual canbus boxes with available firmware upgrades.
There is a list on 4pda of the websites.
I've never even seen a thread where anyone has successfully updated any canbus box.
Is there any way to update the canbus file of a FYT uis7862 MEKEDE? Maybe only updating this file can solve the problem, because in the canbus configuration of the radio, SLK version does not appear and I have to configure with B200 Class
Click to expand...
Click to collapse
Yes you can update the canbus app from within the "App Store" app.
There is an app a user made that detects the canbus messages that the head unit receives from the canbus box (not what the canbus box receives from the car).
The app only lists random numbers that are detected upon button presses but you could see if the canbus box is passing specific button presses to your unit or not
You could install that app to check this.
https://github.com/AxesOfEvil/FYTCanbusMonitor/releases/download/v0.0.1/FYTCanbusMonitor-0.0.1.apk
There's also Protocol Print in the factory settings menu. This spits out every single message received to your canbus (at speed) and requires you to record your screen while pressing buttons to see if they are detected.
surfer63 said:
Note though that this (possible) Canbus upgrade, is the Canbus apk on the unit. Not the firmware inside the Canbus decoder.
The apk is also regularly updated. It really is a huge amount of if..then..else statements per car and canbus type, where new functionalities are added if canbus decoders get newer firmware on delivery of new units.
Click to expand...
Click to collapse
Hello everyone. Thanks for answering the questions.
Unfortunately, in my mekede unit, there is no function or app to canbus update .
Is there any way to add an app that can force this update?
3PI said:
Unfortunately, in my mekede unit, there is no function or app to canbus update .
Is there any way to add an app that can force this update?
Click to expand...
Click to collapse
Maybe another user has the apk for you.
The problem is that some users do have apps in the Appstore apk, and others don't.
On my unit the Appstore apk mentions that it can't connect to the Appstore, and it remains empty. No matter what I try.
Other users experience the same and for others it does work. It is a bit of a "hit and miss" experience.
surfer63 said:
Maybe another user has the apk for you.
The problem is that some users do have apps in the Appstore apk, and others don't.
On my unit the Appstore apk mentions that it can't connect to the Appstore, and it remains empty. No matter what I try.
Other users experience the same and for others it does work. It is a bit of a "hit and miss" experience.
Click to expand...
Click to collapse
Thanks again for the information.
Let's see if any kind colleague appears, and can provide me with the APP to be able to update canbus and see if my car model appears. Until now, I have made the buttons on the steering wheel work but adding in the setting, another model other than Mercedes, because mine does not appear.
Anyway, I provide more information:
My Box canbus Decoder:
After researching different decoder boxes, I have located on amazon, a provider with a much more modern decoder box. My decoder boxes are of very old software and firmware (2017 and 2018 year), and perhaps for this reason, my car does not behave well.
Amazon Box canbus decoder
I bought it from him for about €20, and I was surprised that the box he supplied me with is even more modern in hardware and firmware. I haven't tried it yet. Maybe it will solve some problem of old cars.
My New Box canbus Decoder
I will comment results.

Categories

Resources