soundhax : getting unsigned code execution through sound (DS)
/ smealum
this is a short and super crappy quality video showing off an exploit being delivered through audio (!) on the DS. the exploit relies on Bangai-o Spirit's sound-based level transfer feature. basically all that was necessary for this was REing the audio encoding format and feeding it a compressed level that would overrun the buffer it's decompressed into, and then jump to code also contained in the audio signal. there was nothing really fancy; the format is kind of crappy, there's no redundancy or error correction and is the opposite of robust.
still cool though !
here's the sound i used for this video : http://smealum.net/soundhax.wav ; should work on US version. be careful though, it'll likely corrupt your savegame and you'll have to reset it afterwards.
here's the code used to generate the payload : https://gist.github.com/smealum/dbc3c...