Good videos, with context.
[TAS] Super Mario World "Arbitrary Code Execution" in 02:25.19 by Masterjun

[TAS] Super Mario World "Arbitrary Code Execution" in 02:25.19 by Masterjun

Masterjun3
0 HN recommenders · discussed 2015–2021
Open YouTube ↗

About this video

A tool-assisted speedrun of Super Mario World that achieves arbitrary code execution through frame-precise controller inputs, finishing in 2:25. It was also performed live on real hardware at AGDQ 2014.

Why it appears in the archive

Cited as the classic example of arbitrary code execution inside a game, with later runs injecting Pong, Snake and Flappy Bird.

AI-generated summary and labels from the source dataset; verify important details against the video. Source & credits.

From the Hacker News discussion

Scuds · 2015-04 · reference

Similar deal with super mario world, using programmed controllers to poke arbitrary code into memory and execute it. [VIDEO]

Read original comment ↗
Buge · 2016-05 · reference

He's pointing out that although this type of thing has already been done before by automated inputs (such as this video [VIDEO] ), this is the first time a human has done it.

Read original comment ↗
7373737373 · 2017-07 · reference

One of the most brilliant applications of this concept is the Pokémon Yellow Total Control Hack: [LINK] Similarly, arbitrary code execution in Super Mario World: [VIDEO] It's like transforming a chess game into Mikado just by playing it.

Read original comment ↗
crankylinuxuser · 2018-02 · reference

[VIDEO] Video is about exploiting Super Mario world, on SNES. The result is that the exploiter then proceeds to make 2 new games inside SMW: Pong and Snake. Those games don't exist inside SMW. They were uploaded using controller inputs. All it takes is 1 hack.

Read original comment ↗
politician · 2019-04 · reference

That's wild because Super Mario Bros contains a built-in code editor (via arbitrary code execution easter eggs), and Nintendo is OK with that. [VIDEO]

Read original comment ↗
duskwuff · 2021-03 · reference

Somewhat disappointed. I was expecting them to use the well-known arbitrary code execution exploit in this game to load their own implementation of FizzBuzz, cf. [VIDEO] The method used by Masterjun3 is TAS-only (it involves executing the contents of the controller registers as code, which requires frame-precise inputs), but there are some other methods which are more viable for a real-time attack.

Read original comment ↗