[TAS] Pokémon Yellow - Arbitrary Code Execution
MrWint4 HN recommenders · 2020–2025
598K views · demo · evergreen · Uploaded 2017-02-05
A tool-assisted speedrun of Pokemon Yellow by MrWint that uses arbitrary code execution to push Game Boy hardware to its limits. Through crafted inputs it injects code and ends up running other programs, such as Tetris, inside the game.
HN points to it as the standard demonstration of arbitrary code execution on a Game Boy, and of glitches and bugs being turned into a working computer.
1:25:348 Bit & '8 Bitish' Graphics-Outside the Box
GDC Festival of Gaming
24:39SM64 - Watch for Rolling Rocks - 0.5x A Presses (Commentated) [OUTDATED]
pannenkoek2012
22:21Reverse emulating the NES to give it SUPER POWERS!
suckerpinch
1:01:07The Ultimate Game Boy Talk (33c3)
media.ccc.de
31:37How Crash Bandicoot Hacked The Original Playstation | War Stories | Ars Technica
Ars Technica
5:58MarI/O - Machine Learning for Video Games
SethBling
53:51The Engoodening of No Man's Sky
Internet Historian
16:18Computer program that learns to play classic NES games
suckerpinch
6 comments from Hacker News
At the end of the day, if you look at a low enough level in the stack, there are no types. In a very concrete way, types are a high-level idea, and if the high-level stops matching the low-level, then bugs crop up. See for example Tetris implemented in Pokémon Yellow via runtime code injection: [VIDEO] Their compiler missed that! So I think there's good reason to switch from talking about types as "assumptions", and think of them as compile time "assertions". Something lower-level in the stack could break the high-level code, but that doesn't make the high-level code useless, just imperfect.
It mentions Pokemon Yellow, but really any code run isn't really "run in the game" more so that it uses bugs to hack together alternate instructions for the game boy to execute. Good example: [VIDEO] (skip to 1:20 for craziness)
Arbitrary Code Execution TAS like Triforce% or this Pokemon Yellow one[1] are more or less demos that target both the console and the "host game". I would say even some non-ACE ones like this Brainage TAS[2] are demos :D [1] [VIDEO] [2] [LINK]
One of the crazier uses of ACE in Gameboy Pokemon games exploits is this "speedrun", by MrWint: [VIDEO] ([TAS] Pokémon Yellow - Arbitrary Code Execution) I've timestamped the part where the actual exploit begins, after all of thesetup. It's worth mentioning that this isn't faked or edited in any way, and it's possible to download the input data and replicate on a emulator yourself.
Sometimes even after you've come up with the exploit, you can create something really beautiful for the console to run afterwards. Pokemon Yellow: [VIDEO] Super Mario World: [LINK]
There is an amazing video of a similar exploit in Pokémon Yellow where they basically run a bunch of different games: [VIDEO]