Pages: 1 ... 9 10 [11]
Author Topic: Open Source NefMoto ME7 ECU Flasher and Data Logger  (Read 408312 times)
nyet
Administrator
Hero Member
*****

Karma: +617/-190
Online Online

Posts: 12396


WWW
« Reply #150 on: September 03, 2026, 02:26:56 PM »

Also i have built https://github.com/NefMoto/NefMotoOpenSource/releases/tag/v1.9.7.1-rc0 ... please test that and 1.9.6.0 tia

And another test build https://github.com/NefMoto/NefMotoOpenSource/releases/tag/v1.9.7.1-rc1
 .. i still can't reproduce your issue Sad
Logged

ME7.1 tuning guide
ECUx Plot
ME7Sum checksum
Trim heatmap tool

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your ex
Seat Leon Auq
Newbie
*

Karma: +0/-4
Offline Offline

Posts: 9


« Reply #151 on: September 06, 2026, 10:51:42 AM »

I have send you email to speed up the process, you are not asking a lot, after all you did for this forum that is at least I can do



**Update: SAI/EVAP/N249/O2-delete write (mostly) successful, one stuck checksum sector, and testing a newer version for read stability**

Quick update on the 06A906032HN saga.

**The write (v1.9.4.3, battery charger disconnected):**

Did a Full Write Flash of my SAI/EVAP/N249/rear-O2-CAT delete file (patched onto my own ORI, then checksum-corrected with ME7Sum — verified 0 errors before flashing). Connection held for the entire ~12 minute write with zero TesterPresent disconnects.

However, 4 sectors near the top of the chip failed to erase and were skipped via the tool's "Sector Erase Failed → No" prompt:
- 0x8F0000-0x8F7FFF
- 0x8F8000-0x8F9FFF
- 0x8FA000-0x8FBFFF
- 0x8FC000-0x8FFFFF

Result: "Wrote 15 of 19 sectors." I checked with ME7Sum and confirmed these 4 sectors contain none of my intended codeword changes except the very last one, which holds the final ROM checksum at $FFFE0. So all 14 SAI/EVAP/N249/O2 codewords are correctly written, but the top-level ROM checksum is still the stock value — ME7Sum flags it as "1/1 uncorrected error."

**Real-world result:** Car starts and idles completely normally. Logged ~10 minutes total across two sessions (cold start through full warm-up to 105°C, plus some throttle blips up to ~2800rpm) — zero misfires, zero knock-related ignition retard, clean AFR control throughout. No P0605-type internal ECU error DTC either. So the one unwritten checksum block hasn't caused any noticeable runtime issue so far, but I'd still like to get it written correctly.

**Testing v1.9.6.0 for connection stability (read-only, no write attempted with it):**

Since erase kept failing specifically on those boot-block sectors, I tried v1.9.6.0 to see how it handles connections. Results so far:
- Connected instantly and reliably via KWP1281 → KWP2000, even with my battery charger still connected (which seemed to cause instability on 1.9.4.3 earlier the same day)
- Successfully read and cleared DTCs multiple times, no issues
- Ran a Full Read Flash: completed in 6:07 with zero disconnects, and the resulting bin matches byte-for-byte (verified with ME7Sum) the actual known state of my ECU (15/19 sectors patched, only that one checksum still stock)

So the read path on v1.9.6.0 seems fully reliable here, for both short and long operations. Haven't tried a write with it yet.

**Question for BlackT specifically:** You'd mentioned diff/full write hanging (ECU staying in programming mode) on recent NefMoto versions for the same 06A...HN ECU family, with 1.9.4.3 being fine. Do you remember which exact version(s) you saw that on? I'm currently sitting on v1.9.6.0 and trying to decide whether it's safe to attempt a write with it to retry that one stuck sector, or whether I should stick to 1.9.4.3 for any write and only use the newer build for reads.



« Last Edit: September 06, 2026, 11:46:04 AM by Seat Leon Auq » Logged
nyet
Administrator
Hero Member
*****

Karma: +617/-190
Online Online

Posts: 12396


WWW
« Reply #152 on: September 06, 2026, 01:49:01 PM »

Please try https://github.com/NefMoto/NefMotoOpenSource/releases/tag/v1.9.7.1-rc1 as the regression is probably after 1.9.6.0

At this point testing with anything earlier than 1.9.6.0+ isn't useful as it won't help me narrow down the root cause. If you have time, you could try 1.9.6.1 to confirm but if you only have time to test one version, try v1.9.7.1-rc1 (since we know v1.9.6.2 is broken?)

Also sector erase should never fail, regardless. Something else is wrong. Most likely you selected the wrong layout.


Again, we're trying to debug connect problems in the latest version. Doing a lot of testing on old versions is not useful other than "this version worked, this version did not" - its to help me track down which version broke.

Re: the failed erase problem (totally unrelated to what we are trying to fix, you just complicated matters now):

Full write LoggerLog (erase requests + Received unsuccessful response to erase flash request: 0x??)

Memory layout selected (likely ME7 29F800BT)
Do not full-write again on 1.9.6.0 until erase on 0x8F0000–0x8FFFFF succeeds or you know why the ECU rejected it. No on that prompt is how they got a half-written checksum sector.

Back on topic:

PLEASE try 1.9.7.1-rc1 for connect only first (no read write, we are debugging connect); the 1.9.6.0 success is already a data point that connect can work on their car, and that a change more recent than 1.9.6.0 causes the problem.
« Last Edit: September 06, 2026, 02:22:57 PM by nyet » Logged

ME7.1 tuning guide
ECUx Plot
ME7Sum checksum
Trim heatmap tool

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your ex
Seat Leon Auq
Newbie
*

Karma: +0/-4
Offline Offline

Posts: 9


« Reply #153 on: September 07, 2026, 12:35:00 PM »

Please try https://github.com/NefMoto/NefMotoOpenSource/releases/tag/v1.9.7.1-rc1 as the regression is probably after 1.9.6.0

At this point testing with anything earlier than 1.9.6.0+ isn't useful as it won't help me narrow down the root cause. If you have time, you could try 1.9.6.1 to confirm but if you only have time to test one version, try v1.9.7.1-rc1 (since we know v1.9.6.2 is broken?)

Also sector erase should never fail, regardless. Something else is wrong. Most likely you selected the wrong layout.


Again, we're trying to debug connect problems in the latest version. Doing a lot of testing on old versions is not useful other than "this version worked, this version did not" - its to help me track down which version broke.

Re: the failed erase problem (totally unrelated to what we are trying to fix, you just complicated matters now):

Full write LoggerLog (erase requests + Received unsuccessful response to erase flash request: 0x??)

Memory layout selected (likely ME7 29F800BT)
Do not full-write again on 1.9.6.0 until erase on 0x8F0000–0x8FFFFF succeeds or you know why the ECU rejected it. No on that prompt is how they got a half-written checksum sector.

Back on topic:

PLEASE try 1.9.7.1-rc1 for connect only first (no read write, we are debugging connect); the 1.9.6.0 success is already a data point that connect can work on their car, and that a change more recent than 1.9.6.0 causes the problem.

Haven't attempted full-write on 1.9.6.0 since your message — understood on that.

1. v1.9.7.1-rc1 — connect only, as requested:

Connected and read DTCs successfully 4 times today. Looks solid on the connect side so far. No read/write attempted with this version.

2. Re: the erase failure:





Memory layout looks correct to me — BaseAddress 0x800000, 1MB, 19 sectors (15×64KB + 32KB+8KB+8KB+16KB), matches the standard top-boot layout for 29F800BT.



All 4 failed sector erases (0x8F0000–0x8FFFFF) returned the identical KWP2000 response: GeneralReject, right after StartRoutineByLocalIdentifier succeeded.
« Last Edit: September 07, 2026, 12:53:30 PM by Seat Leon Auq » Logged
nyet
Administrator
Hero Member
*****

Karma: +617/-190
Online Online

Posts: 12396


WWW
« Reply #154 on: September 07, 2026, 01:34:13 PM »

Pretty sure that flash is a BB given the erase errors indicate it is not a BT, perhaps the flash was swapped to a BB

https://github.com/NefMoto/NefMotoOpenSource/issues/103

Thank you for testing! Not sure when I will do a subsequent release, have a quite a few bits to merge before the next.

Please try the BB layout and/or open your ecu and take a peek at what flash is actually on there. Also, bootmode will do an ID of the flash as well.

Also I don't know if i've ever seen a ME7.5 BT.. i could be wrong.
« Last Edit: September 07, 2026, 01:48:55 PM by nyet » Logged

ME7.1 tuning guide
ECUx Plot
ME7Sum checksum
Trim heatmap tool

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your ex
Pages: 1 ... 9 10 [11]
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.412 seconds with 18 queries. (Pretty URLs adds 0s, 0q)