code powering the comma.ai panda
Go to file
Robbe Derks f8db3ac64f move to ESP_B for vehicle speed to match openpilot 2024-04-19 22:08:36 +02:00
.github/workflows CI: fix misra mutation tests (#1934) 2024-04-18 17:59:33 -07:00
board move to ESP_B for vehicle speed to match openpilot 2024-04-19 22:08:36 +02:00
certs Deprecate ESP (#592) 2020-08-26 15:37:50 -07:00
crypto CI: set PYTHONWARNINGS=error (#1323) 2023-04-02 09:33:35 -07:00
docs move this to commaai/neo 2023-12-09 14:54:16 -08:00
drivers remove windows driver (#1793) 2024-01-13 14:05:10 -08:00
examples use pyupgrade to update syntax (#1889) 2024-02-24 13:56:28 -08:00
python IsoTpMessage: extend timeout on first frame response (#1933) 2024-04-17 23:23:50 -07:00
release cleanup fw filename conventions (#1434) 2023-05-21 21:19:19 -07:00
tests CI: fix misra mutation tests (#1934) 2024-04-18 17:59:33 -07:00
.gitignore safety: coverage report (#1696) 2023-10-25 22:01:01 -07:00
.pre-commit-config.yaml pre-commit: autoupdate hooks (#1924) 2024-04-09 11:02:22 -07:00
Dockerfile pytest bugs are fixed (#1925) 2024-04-08 18:23:27 -07:00
Jenkinsfile remove old disable tests from jenkinsfile 2024-03-21 21:56:24 -07:00
LICENSE initial commit 2017-04-06 18:11:36 -07:00
README.md remove pedal fw (#1872) 2024-02-16 22:58:01 -08:00
SConscript Rename stm32fx/ -> stm32f4/ (#1898) 2024-03-11 16:18:56 -07:00
SConstruct Adding compilation_db to panda builds (#1828) 2024-01-21 16:16:53 -08:00
__init__.py Remove flash logging (#1674) 2023-09-30 12:49:46 -07:00
mypy.ini Same mypy checks as openpilot (#1233) 2023-02-11 12:25:13 -08:00
panda.png update readme graphics 2018-05-10 00:01:08 -07:00
pyproject.toml CI: fix misra mutation tests (#1934) 2024-04-18 17:59:33 -07:00
requirements.txt Add more MISRA mutation tests (#1818) 2024-01-20 15:52:38 -08:00
setup.cfg Created python package and implemented industry best practices. 2017-06-14 12:00:04 -07:00
setup.py use pyupgrade to update syntax (#1889) 2024-02-24 13:56:28 -08:00

README.md

Welcome to panda

panda tests panda drivers

panda speaks CAN and CAN FD, and it runs on STM32F413 and STM32H725.

Directory structure

.
├── board           # Code that runs on the STM32
├── drivers         # Drivers (not needed for use with Python)
├── python          # Python userspace library for interfacing with the panda
├── tests           # Tests and helper programs for panda

Safety Model

When a panda powers up, by default it's in SAFETY_SILENT mode. While in SAFETY_SILENT mode, the CAN buses are forced to be silent. In order to send messages, you have to select a safety mode. Some of safety modes (for example SAFETY_ALLOUTPUT) are disabled in release firmwares. In order to use them, compile and flash your own build.

Safety modes optionally support controls_allowed, which allows or blocks a subset of messages based on a customizable state in the board.

Code Rigor

The panda firmware is written for its use in conjuction with openpilot. The panda firmware, through its safety model, provides and enforces the openpilot safety. Due to its critical function, it's important that the application code rigor within the board folder is held to high standards.

These are the CI regression tests we have in place:

  • A generic static code analysis is performed by cppcheck.
  • In addition, cppcheck has a specific addon to check for MISRA C:2012 violations. See current coverage.
  • Compiler options are relatively strict: the flags -Wall -Wextra -Wstrict-prototypes -Werror are enforced.
  • The safety logic is tested and verified by unit tests for each supported car variant. to ensure that the behavior remains unchanged.
  • A hardware-in-the-loop test verifies panda's functionalities on all active panda variants, including:
    • additional safety model checks
    • compiling and flashing the bootstub and app code
    • receiving, sending, and forwarding CAN messages on all buses
    • CAN loopback and latency tests through USB and SPI

The above tests are themselves tested by:

  • a mutation test on the MISRA coverage
  • 100% line coverage enforced on the safety unit tests

In addition, we run the ruff linter and mypy on panda's Python library.

Usage

Setup dependencies:

# Ubuntu
sudo apt-get install dfu-util gcc-arm-none-eabi python3-pip libffi-dev git

# macOS
brew install --cask gcc-arm-embedded
brew install python3 dfu-util gcc@13

Clone panda repository and install:

git clone https://github.com/commaai/panda.git
cd panda

# install dependencies
pip install -r requirements.txt

# install panda
python setup.py install

See the Panda class for how to interact with the panda.

For example, to receive CAN messages:

>>> from panda import Panda
>>> panda = Panda()
>>> panda.can_recv()

And to send one on bus 0:

>>> panda.can_send(0x1aa, "message", 0)

Note that you may have to setup udev rules for Linux, such as

sudo tee /etc/udev/rules.d/11-panda.rules <<EOF
SUBSYSTEM=="usb", ATTRS{idVendor}=="bbaa", ATTRS{idProduct}=="ddcc", MODE="0666"
SUBSYSTEM=="usb", ATTRS{idVendor}=="bbaa", ATTRS{idProduct}=="ddee", MODE="0666"
EOF
sudo udevadm control --reload-rules && sudo udevadm trigger

The panda jungle uses different udev rules. See the repo for instructions.

Software interface support

As a universal car interface, it should support every reasonable software interface.

Licensing

panda software is released under the MIT license unless otherwise specified.