Fandom

Vehicle Reverse Engineering Wiki

GM GlobalA

30pages on
this wiki
Add New Page
Comment1 Share

Data SourcesEdit

This network features two broad types of commands: call and response, and module-to-module. Call and response commands are triggered by events, such as button presses. Module-to-module commands are the traffic between networked devices, and typically relay sensor data.

Call-and-ResponseEdit

Data Header Arbitration ID Network Byte 0 Byte 1 Byte 2 Byte 3 Byte 4 Byte 5 Byte 6 Byte 7 Formula Units Notes More Information Verified on...
Radio Volume Up 10438040 SW-CAN N/A 0x01 0x00 0x00 0x00 0x00 0x00 0x00 0x00 Byte 0 identifies command N/A After pressing, button must be canceled by changing B0 to 0x00 No Link 2011 Buick Regal
Radio Volume Down 10438040 SW-CAN N/A 0x02 0x00 0x00 0x00 0x00 0x00 0x00 0x00 Byte 0 identifies command N/A After pressing, button must be canceled by changing B0 to 0x00 No Link 2011 Buick Regal
Radio Voice Recognition 10438040 SW-CAN N/A 0x06 0x00 0x00 0x00 0x00 0x00 0x00 0x00 Byte 0 identifies command N/A After pressing, button must be canceled by changing B0 to 0x00 No Link 2011 Buick Regal
Radio Mute Toggle 10438040 SW-CAN N/A 0x07 0x00 0x00 0x00 0x00 0x00 0x00 0x00 Byte 0 identifies command N/A After pressing, button must be canceled by changing B0 to 0x00 No Link 2011 Buick Regal

Module-to-ModuleEdit

Data Header Arbitration ID Network Byte 0 Byte 1 Byte 2 Byte 3 Byte 4 Byte 5 Byte 6 Byte 7 Formula Units Notes More Information Verified on...
Speedometer Data 102CC040 N/A SW-CAN Prefix? Throttle Status - 0x01 on, 0x09 off) Gear - CF park, CE reverse, CD neutral, C2 drive, C2 2nd, ... Temperature (100 + ?) Fuel Level? ? ? RPM N/A N/A Not yet tested Global A - Speedometer from BCM Not Verified - 2011 Buick Regal

Mode $22 PIDsEdit

General Motors has enhanced PIDs for their vehicles. A list of "enhanced" PIDs will appear below.

ActuatorsEdit

Some devices may be controlled by diagnostic tools or test equipment. These are usually operated by "services," and some require a seed/key to unlock. Examples appear below.

Actuator Function Network Header Byte 0 Byte 1 Byte 2 Byte 3 Byte 4 Byte 5 Byte 6 Byte 7 Seed/Key? Notes More Information Verified on...
Headunit Eject Disk SW-CAN 0x244 0x07 0xAE 0x05 0x01 0x00 0x00 0x00 0x00 No Ejects disk No Link 2011 Buick Regal

NotesEdit

GM vehicles have, at minimum, a high-speed (HS) and single-wire (SW) Controller Area Network. HS-CAN typically operates as 11bit, 500kbps, while SW-CAN operates at 33.3kbps with 29 bit headers. Most GM commands have an "arbitration ID" that is invariant for a given instruction, so while the exact header may vary from vehicle to vehicle, the arbitration ID will not. Additionally, nodes on HS-CAN have well-defined IDs that are invariant, e.g. the functional address for all Body Control Modules (BCMs) is 0x241 with a reply on 0x641. Nodes on SW-CAN may be identified quickly based on the last four characters, which correspond to a two-digit code for the sending and target node.

LinksEdit

CANBusHack Services List

Foxdie's mBed GMLan-Sniffer Repo

Foxdie's GMLan Libraries

CarModders' GMLan "Bible"

Latest activityEdit

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.