Developers have introduced a tool for running Tesla firmware in QEMU

Enthusiasts have released Tesla_OS_On_QEMU — a specialized set of tools that allows unpacking, modifying and running the infotainment firmware of Tesla electric vehicles in the QEMU emulator. The solution is designed for autonomous analysis of software without the need to connect to real automotive equipment.

The main functionality of the tool is to bypass the dm-verity mechanism, which in normal mode blocks the system from starting when any changes are detected in the file system. The software complex allows security researchers to access the internal components of the OS, study the structure of partitions and test the behavior of the firmware in an isolated virtual environment.

To work with the firmware, users need to perform a procedure for patching the image to disable data integrity checks. The toolkit includes scripts to automate the process of preparing the environment, which greatly simplifies the reverse engineering of closed system components. The entire project code is published under an open free license.

The emergence of such tools allows for a deep security audit of automotive systems without putting real vehicles at risk. The ability to run the firmware in an emulator provides access to studying the API, network protocols and interaction mechanisms of the Tesla multimedia system components, which were previously hidden from independent researchers.