commaai/panda

What it solves

It provides a secure interface for interacting with a vehicle's CAN (Controller Area Network) and CAN FD buses, ensuring that commands sent to the car are filtered through a safety model to prevent dangerous operations.

How it works

Running on the STM32H725 microcontroller, panda acts as a bridge between a computer and the car's internal communication network. It uses a Python userspace library for interfacing and incorporates vehicle-specific safety logic from the opendbc project to enforce safety constraints on outgoing messages.

Who it’s for

Developers working on automotive software, specifically those building systems like openpilot that require reliable and safe communication with vehicle hardware.

Highlights

• Safety-First Design: Integrates a safety model to enforce vehicle-specific constraints on CAN messages.
• Rigorous Testing: Employs MISRA C:2012 compliance checks, static analysis via cppcheck, and hardware-in-the-loop testing.
• Broad Compatibility: Supports both standard CAN and CAN FD protocols.
• Developer Tools: Includes a Python library for easy interaction and example scripts for vehicle integration.