Address Error Exception - Revision history

AgentMuffin at 23:56, 22 May 2026

2026-05-22T23:56:41Z

← Older revision		Revision as of 23:56, 22 May 2026
Line 10:		Line 10:
	! Cause !! ACE Exploitable !! Any Exploitable !! Notes		! Cause !! ACE Exploitable !! Any Exploitable !! Notes
	\|-		\|-
	\| Deleting a non-existent file on the File Select Screen \|\| style="background-color: #ff9696"\| No \|\| style="background-color: #fffca8"\| Doubtful \|\| sMainMenuButtons[MENU_BUTTON_ERASE]->oMenuButtonActionPhase is NULL when written to. For selecting 'NO' this results in the button zoom being unaffected. 'YES' is more complex. It's just a write and the copy menu doesn't allow for this glitch, so this is unlikely to be exploitable. Plus, there's barely anything to work with when we're not even in-game.		\| Deleting a non-existent file on the File Select Screen \|\| style="background-color: #ff9696"\| No \|\| style="background-color: #fffca8"\| Doubtful \|\| <code>sMainMenuButtons[MENU_BUTTON_ERASE]->oMenuButtonActionPhase</code> is NULL when written to. For selecting 'NO' this results in the button zoom being unaffected. 'YES' is more complex. It's just a write and the copy menu doesn't allow for this glitch, so this is unlikely to be exploitable. Plus, there's barely anything to work with when we're not even in-game.
	\|-		\|-
	\| Moving a shadow above surface 12 while it's over OOB \|\|style="background-color: #baffa8"\| \|\|style="background-color: #baffa8"\| \|\|		\| Moving a shadow above surface 12 while it's over OOB \|\|style="background-color: #baffa8"\| \|\|style="background-color: #baffa8"\| \|\|
	\|-		\|-
	\| Killing a Monty Mole remotely \|\| style="background-color: #ff9696"\| No \|\| style="background-color: #ff9696"\| No \|\| o->oMontyMoleCurrentHole->oMontyMoleHoleCooldown = 30 causes crash as mario needs to be < 1500 units for monty to select a hole (otherwise it's null)		\| Killing a Monty Mole remotely \|\| style="background-color: #ff9696"\| No \|\| style="background-color: #ff9696"\| No \|\| <code>o->oMontyMoleCurrentHole->oMontyMoleHoleCooldown = 30</code> causes crash as mario needs to be < 1500 units for monty to select a hole (otherwise it's null)
	\|-		\|-
	\| Killing an uninitialized Monty Mole \|\| style="background-color: #ff9696"\| No \|\| style="background-color: #ff9696"\| No \|\| (same as above)		\| Killing an uninitialized Monty Mole \|\| style="background-color: #ff9696"\| No \|\| style="background-color: #ff9696"\| No \|\| (same as above)
	\|-		\|-
	\| Going out of bounds in a room with a painting \|\| style="background-color: #ff9696"\| No \|\| style="background-color: #ff9696"\| No \|\| `gPaintingMarioFloorType` is what is affected, and it's updated every frame the OoB check happens; at most, you could ''maybe'' delay entering a painting by 1 frame		\| Going out of bounds in a room with a painting \|\| style="background-color: #ff9696"\| No \|\| style="background-color: #ff9696"\| No \|\| <code>gPaintingMarioFloorType</code> is what is affected, and it's updated every frame the OoB check happens; at most, you could ''maybe'' delay entering a painting by 1 frame
	\|-		\|-
	\| Being pushed off of a hang-able ceiling while in the idle hanging action \|\| style="background-color: #ff9696"\| No \|\| style="background-color: #fffca8"\| Doubtful \|\| No effect for idle loop hang t8, last use of t8 set is ''jr t8'' which is never the hang-able value 0x05)		\| Being pushed off of a hang-able ceiling while in the idle hanging action \|\| style="background-color: #ff9696"\| No \|\| style="background-color: #fffca8"\| Doubtful \|\| No effect for idle loop hang t8, last use of t8 set is ''jr t8'' which is never the hang-able value 0x05)

Nim: errors aren't values

2021-09-27T16:21:14Z

errors aren't values

← Older revision		Revision as of 16:21, 27 September 2021
Line 40:		Line 40:
	\|}		\|}

	[[Category:~~Values~~]]		[[Category:Mechanics]]

PanchamBro: adding Values category

2021-09-27T16:19:19Z

adding Values category

← Older revision		Revision as of 16:19, 27 September 2021
Line 39:		Line 39:
	\| Warping out of a level while passing over a loading zone \|\|style="background-color: #ffb65e"\| \|\|style="background-color: #ffb65e"\| \|\| Similar to above, but only hypothetical. Maybe possible in DDD using the Sub Gate warp and whirlpool cloning to reach the instant loading zone, but not yet achieved without hacks.		\| Warping out of a level while passing over a loading zone \|\|style="background-color: #ffb65e"\| \|\|style="background-color: #ffb65e"\| \|\| Similar to above, but only hypothetical. Maybe possible in DDD using the Sub Gate warp and whirlpool cloning to reach the instant loading zone, but not yet achieved without hacks.
	\|}		\|}

			[[Category:Values]]

Nim: Undo revision 13285 by Macrepeh (talk)

2021-03-06T18:46:07Z

Undo revision 13285 by Macrepeh (talk)

← Older revision		Revision as of 18:46, 6 March 2021
Line 39:		Line 39:
	\| Warping out of a level while passing over a loading zone \|\|style="background-color: #ffb65e"\| \|\|style="background-color: #ffb65e"\| \|\| Similar to above, but only hypothetical. Maybe possible in DDD using the Sub Gate warp and whirlpool cloning to reach the instant loading zone, but not yet achieved without hacks.		\| Warping out of a level while passing over a loading zone \|\|style="background-color: #ffb65e"\| \|\|style="background-color: #ffb65e"\| \|\| Similar to above, but only hypothetical. Maybe possible in DDD using the Sub Gate warp and whirlpool cloning to reach the instant loading zone, but not yet achieved without hacks.
	\|}		\|}
	~~{{glitches}}~~

Macrepeh at 16:43, 6 March 2021

2021-03-06T16:43:07Z

← Older revision		Revision as of 16:43, 6 March 2021
Line 39:		Line 39:
	\| Warping out of a level while passing over a loading zone \|\|style="background-color: #ffb65e"\| \|\|style="background-color: #ffb65e"\| \|\| Similar to above, but only hypothetical. Maybe possible in DDD using the Sub Gate warp and whirlpool cloning to reach the instant loading zone, but not yet achieved without hacks.		\| Warping out of a level while passing over a loading zone \|\|style="background-color: #ffb65e"\| \|\|style="background-color: #ffb65e"\| \|\| Similar to above, but only hypothetical. Maybe possible in DDD using the Sub Gate warp and whirlpool cloning to reach the instant loading zone, but not yet achieved without hacks.
	\|}		\|}
			{{glitches}}

Macrepeh: Warp and loading zone

2021-03-02T22:21:00Z

Warp and loading zone

← Older revision		Revision as of 22:21, 2 March 2021
Line 34:		Line 34:
	\|-		\|-
	\| Sound glitch \|\| style="background-color: #ffb65e"\| N/A \|\| style="background-color: #ffb65e"\| N/A \|\| The cause of sound glitch is unknown. Contrary to popular belief, it can sometimes occur on versions other than the original Japanese N64 release.		\| Sound glitch \|\| style="background-color: #ffb65e"\| N/A \|\| style="background-color: #ffb65e"\| N/A \|\| The cause of sound glitch is unknown. Contrary to popular belief, it can sometimes occur on versions other than the original Japanese N64 release.
			\|-
			\| Teleporting while passing over a loading zone \|\|style="background-color: #ffb65e"\| Unknown \|\|style="background-color: #baffa8"\| Yes \|\| Since the area changed, there is now no teleporter with the same ID as the one Mario used to warp. Thus the game returns NULL when trying to find the teleporter to warp to, and crashes when trying to access information about its destination. Under certain conditions, this can cause a Wrong Warp on PAL or Shindou VC.
			\|-
			\| Warping out of a level while passing over a loading zone \|\|style="background-color: #ffb65e"\| \|\|style="background-color: #ffb65e"\| \|\| Similar to above, but only hypothetical. Maybe possible in DDD using the Sub Gate warp and whirlpool cloning to reach the instant loading zone, but not yet achieved without hacks.
	\|}		\|}

MMMMMMMMMMMMM: complete this discussion

2020-07-17T13:17:17Z

complete this discussion

← Older revision		Revision as of 13:17, 17 July 2020
Line 31:		Line 31:
	12b4: 13210008 beq t9,at,12d8 <act_start_hanging+0xf0>		12b4: 13210008 beq t9,at,12d8 <act_start_hanging+0xf0>
	12b8: 00000000 nop		12b8: 00000000 nop
	Since the t9 load is skipped, the only effect could be to potentially cause Mario to stay hanging for a single frame without a ceiling.		Since the t9 load is skipped, the only effect could be to potentially cause Mario to stay hanging for a single frame without a ceiling. After that, `perform_hanging_step` will catch the fact that Mario's ceiling is NULL and stop the hang. Similar effects on PAL version.
	\|-		\|-
	\| Sound glitch \|\| style="background-color: #ffb65e"\| N/A \|\| style="background-color: #ffb65e"\| N/A \|\| The cause of sound glitch is unknown. Contrary to popular belief, it can sometimes occur on versions other than the original Japanese N64 release.		\| Sound glitch \|\| style="background-color: #ffb65e"\| N/A \|\| style="background-color: #ffb65e"\| N/A \|\| The cause of sound glitch is unknown. Contrary to popular belief, it can sometimes occur on versions other than the original Japanese N64 release.
	\|}		\|}

MMMMMMMMMMMMM: show ASM and stuff

2020-07-17T12:38:40Z

show ASM and stuff

← Older revision		Revision as of 12:38, 17 July 2020
Line 20:		Line 20:
	\| Going out of bounds in a room with a painting \|\| style="background-color: #ff9696"\| No \|\| style="background-color: #ff9696"\| No \|\| `gPaintingMarioFloorType` is what is affected, and it's updated every frame the OoB check happens; at most, you could ''maybe'' delay entering a painting by 1 frame		\| Going out of bounds in a room with a painting \|\| style="background-color: #ff9696"\| No \|\| style="background-color: #ff9696"\| No \|\| `gPaintingMarioFloorType` is what is affected, and it's updated every frame the OoB check happens; at most, you could ''maybe'' delay entering a painting by 1 frame
	\|-		\|-
	\| Being pushed off of a hang-able ceiling while in the idle hanging action \|\| style="background-color: #ff9696"\| No \|\| style="background-color: #fffca8"\| Doubtful \|\| ~~''t9'' for start hang. Would potentially cause Mario to stay hanging for a single frame without a ceiling,~~ No effect for idle loop hang t8, last use of t8 set is ''jr t8'' which is never the hang-able value 0x05)		\| Being pushed off of a hang-able ceiling while in the idle hanging action \|\| style="background-color: #ff9696"\| No \|\| style="background-color: #fffca8"\| Doubtful \|\| No effect for idle loop hang t8, last use of t8 set is ''jr t8'' which is never the hang-able value 0x05)

			Relevant code (sp24 is gMarioState):
			//! Crash if Mario's referenced ceiling is NULL (same for other hanging actions)
			if (m->ceil->type != SURFACE_HANGABLE) {
			12a4: 8fa80018 lw t0,24(sp)
			12a8: 24010005 li at,5
			12ac: 8d090064 lw t1,100(t0)
			12b0: 85390000 lh t9,0(t1)
			12b4: 13210008 beq t9,at,12d8 <act_start_hanging+0xf0>
			12b8: 00000000 nop
			Since the t9 load is skipped, the only effect could be to potentially cause Mario to stay hanging for a single frame without a ceiling.
	\|-		\|-
	\| Sound glitch \|\| style="background-color: #ffb65e"\| N/A \|\| style="background-color: #ffb65e"\| N/A \|\| The cause of sound glitch is unknown. Contrary to popular belief, it can sometimes occur on versions other than the original Japanese N64 release.		\| Sound glitch \|\| style="background-color: #ffb65e"\| N/A \|\| style="background-color: #ffb65e"\| N/A \|\| The cause of sound glitch is unknown. Contrary to popular belief, it can sometimes occur on versions other than the original Japanese N64 release.
	\|}		\|}

Nim: Reverted edits by Macrepeh (talk) to last revision by Nim

2020-05-30T07:03:06Z

Reverted edits by Macrepeh (talk) to last revision by Nim

← Older revision		Revision as of 07:03, 30 May 2020
Line 24:		Line 24:
	\| Sound glitch \|\| style="background-color: #ffb65e"\| N/A \|\| style="background-color: #ffb65e"\| N/A \|\| The cause of sound glitch is unknown. Contrary to popular belief, it can sometimes occur on versions other than the original Japanese N64 release.		\| Sound glitch \|\| style="background-color: #ffb65e"\| N/A \|\| style="background-color: #ffb65e"\| N/A \|\| The cause of sound glitch is unknown. Contrary to popular belief, it can sometimes occur on versions other than the original Japanese N64 release.
	\|}		\|}
	~~[[Category:Glitches]]~~

Macrepeh at 05:32, 30 May 2020

2020-05-30T05:32:31Z

← Older revision		Revision as of 05:32, 30 May 2020
Line 24:		Line 24:
	\| Sound glitch \|\| style="background-color: #ffb65e"\| N/A \|\| style="background-color: #ffb65e"\| N/A \|\| The cause of sound glitch is unknown. Contrary to popular belief, it can sometimes occur on versions other than the original Japanese N64 release.		\| Sound glitch \|\| style="background-color: #ffb65e"\| N/A \|\| style="background-color: #ffb65e"\| N/A \|\| The cause of sound glitch is unknown. Contrary to popular belief, it can sometimes occur on versions other than the original Japanese N64 release.
	\|}		\|}
			[[Category:Glitches]]