![[TAS] Super Mario World "Arbitrary Code Execution" in 02:25.19 by Masterjun](https://i.ytimg.com/vi/OPcV9uIY5i4/hqdefault.jpg)
[TAS] Super Mario World "Arbitrary Code Execution" in 02:25.19 by Masterjun
About this video
A tool-assisted speedrun of Super Mario World that achieves arbitrary code execution through frame-precise controller inputs, finishing in 2:25. It was also performed live on real hardware at AGDQ 2014.
Why it appears in the archive
Cited as the classic example of arbitrary code execution inside a game, with later runs injecting Pong, Snake and Flappy Bird.
AI-generated summary and labels from the source dataset; verify important details against the video. Source & credits.
From the Hacker News discussion
Similar deal with super mario world, using programmed controllers to poke arbitrary code into memory and execute it. [VIDEO]
Read original comment ↗He's pointing out that although this type of thing has already been done before by automated inputs (such as this video [VIDEO] ), this is the first time a human has done it.
Read original comment ↗One of the most brilliant applications of this concept is the Pokémon Yellow Total Control Hack: [LINK] Similarly, arbitrary code execution in Super Mario World: [VIDEO] It's like transforming a chess game into Mikado just by playing it.
Read original comment ↗[VIDEO] Video is about exploiting Super Mario world, on SNES. The result is that the exploiter then proceeds to make 2 new games inside SMW: Pong and Snake. Those games don't exist inside SMW. They were uploaded using controller inputs. All it takes is 1 hack.
Read original comment ↗That's wild because Super Mario Bros contains a built-in code editor (via arbitrary code execution easter eggs), and Nintendo is OK with that. [VIDEO]
Read original comment ↗Somewhat disappointed. I was expecting them to use the well-known arbitrary code execution exploit in this game to load their own implementation of FizzBuzz, cf. [VIDEO] The method used by Masterjun3 is TAS-only (it involves executing the contents of the controller registers as code, which requires frame-precise inputs), but there are some other methods which are more viable for a real-time attack.
Read original comment ↗