87
edits
Arbitrary code execution: Difference between revisions
→{{game|Emerald}}
ZeMonGrabber (talk | contribs) |
ZeMonGrabber (talk | contribs) |
||
| Line 54: | Line 54: | ||
Viewing the summary of at least one [[??????????]] glitch Pokémon is known to cause the program counter to jump to the location in RAM where [[nickname]]s of Pokémon in the [[PC]] are stored. The only currently known method to obtain this glitch Pokémon is through [[Glitzer Popping]], a sub-glitch of the [[Pomeg glitch]]. Due to the limited set of data values that nicknames can hold, applications of arbitrary code execution using this method are limited.<ref>https://www.youtube.com/watch?v=m9pvNYdhldo</ref> | Viewing the summary of at least one [[??????????]] glitch Pokémon is known to cause the program counter to jump to the location in RAM where [[nickname]]s of Pokémon in the [[PC]] are stored. The only currently known method to obtain this glitch Pokémon is through [[Glitzer Popping]], a sub-glitch of the [[Pomeg glitch]]. Due to the limited set of data values that nicknames can hold, applications of arbitrary code execution using this method are limited.<ref>https://www.youtube.com/watch?v=m9pvNYdhldo</ref> | ||
At least one glitch move's animation script is also known to point to SRAM, specifically address $0E0F14C0 which can be manipulated to redirect the animation pointer to the 11th pc item and then the 15th item. Again, Glitzer Popping is the only currently known method to obtain a Pokémon with this glitch move (Move 27a2 (E! E! ho!)). Arbitrary glitch items and quantities can be obtained through another subglitch of the Pomeg glitch currently undocumented on Bulbapedia, making this method much more viable to spell out code compared to using nicknames | At least one glitch move's animation script is also known to point to SRAM, specifically address $0E0F14C0 which can be manipulated to redirect the animation pointer to the 11th pc item and then the 15th item. Again, Glitzer Popping is the only currently known method to obtain a Pokémon with this glitch move (Move 27a2 (E! E! ho!)). Arbitrary glitch items and quantities can be obtained through another subglitch of the Pomeg glitch currently undocumented on Bulbapedia, making this method much more viable to spell out code compared to using nicknames, however, because of the nature of save data, the file always shifts 2 nibbles and therefore, if your save file has an odd number at address 0E0F14C0 at the beginning, the save file can not be properly manipulated and that save file is not viable for this method of arbitrary code execution | ||
<ref>https://www.youtube.com/watch?v=1pb-6hMDQBs</ref> | |||
==History/Other== | ==History/Other== | ||