Another VHBL Exploid With Demo !

[m0skit0]

I would not say "not exploitable", but it definitely looks no simple typical way of exploiting here.

PS: there's no NULL pointer exception there.

Advertising

[wololo]

BadVAddr is 0, isn't that typical of a null pointer exception?

Advertising

[m0skit0]

Me was looking at $v1, me stupid.

[wth]

if we kept using this UTF32-like style for a bof, inserted data would stay XX 00 00 00 XX 00 00 00 XX 00 00 00 like

No, why so? UTF-32 says each character is 31 bit-wide, so it goes from 0x00000000 to 0x7FFFFFFF, which means 0x7AAAAAAA is a valid UTF32 character (and indeed it is).

ok right
but first we'd still need to find a buffer overflow in the game ^^