Arbitrary code execution: Difference between revisions

m (Information on 8F is nowhere to be found on the page that the 8F link linked to)
Line 54: Line 54:
Viewing the summary of at least one [[??????????]] glitch Pokémon is known to cause the program counter to jump to the location in RAM where [[nickname]]s of Pokémon in the [[PC]] are stored. The only currently known method to obtain this glitch Pokémon is through [[Glitzer Popping]], a sub-glitch of the [[Pomeg glitch]]. Due to the limited set of data values that nicknames can hold, applications of arbitrary code execution using this method are limited.<ref>https://www.youtube.com/watch?v=m9pvNYdhldo</ref>
Viewing the summary of at least one [[??????????]] glitch Pokémon is known to cause the program counter to jump to the location in RAM where [[nickname]]s of Pokémon in the [[PC]] are stored. The only currently known method to obtain this glitch Pokémon is through [[Glitzer Popping]], a sub-glitch of the [[Pomeg glitch]]. Due to the limited set of data values that nicknames can hold, applications of arbitrary code execution using this method are limited.<ref>https://www.youtube.com/watch?v=m9pvNYdhldo</ref>


At least one glitch move's animation script is also known to point to SRAM, specifically the 11th item stored in the [[PC]]. Again, Glitzer Popping is the only currently known method to obtain a Pokémon with this glitch move. Arbitrary glitch items and quantities can be obtained through another subglitch of the Pomeg glitch currently undocumented on Bulbapedia, making this method much more viable to spell out code compared to using nicknames.<ref>https://www.youtube.com/watch?v=1pb-6hMDQBs</ref>
At least one glitch move's animation script is also known to point to SRAM, specifically address $0E0F14C0 which can be manipulated to redirect the animation pointer to the 11th pc item and then the 13th item. Again, Glitzer Popping is the only currently known method to obtain a Pokémon with this glitch move. Arbitrary glitch items and quantities can be obtained through another subglitch of the Pomeg glitch currently undocumented on Bulbapedia, making this method much more viable to spell out code compared to using nicknames.<ref>https://www.youtube.com/watch?v=1pb-6hMDQBs</ref>


==History/Other==
==History/Other==
87

edits