MrCheeze | Paper Mario - Upgrade Menu Storage Explained @MrCheeze | Uploaded July 2016 | Updated October 2024, 3 days ago.
No, I haven't found credits warp yet... but at least now we know why the glitch is so chaotic.
The game has a certain region set aside for dynamic memory allocation (2FB800-34F7FF on the japanese version.) Things that can allocate memory from here include menus, particle graphics, and many other things.
The most notable thing about this dynamic memory is that all of it seems to be freed automatically when going through a loading zone. This is the case even if, because of the Upgrade Menu Storage glitch, there are still pointers into it that are being used by the game.
In other words, the chaos caused by UMS is because of a "use-after-free" error. The memory being used by the menu is marked by the game as free, so as soon as something new (such as a particle) allocates that memory, it will be being used for two different, conflicting, purposes at the same time. The number of ways the memory could end up reused is immense, which is why the effects can be so unpredictable.
lua script used to visualize dynamic memory: pastebin.com/wEj2Bgxe
No, I haven't found credits warp yet... but at least now we know why the glitch is so chaotic.
The game has a certain region set aside for dynamic memory allocation (2FB800-34F7FF on the japanese version.) Things that can allocate memory from here include menus, particle graphics, and many other things.
The most notable thing about this dynamic memory is that all of it seems to be freed automatically when going through a loading zone. This is the case even if, because of the Upgrade Menu Storage glitch, there are still pointers into it that are being used by the game.
In other words, the chaos caused by UMS is because of a "use-after-free" error. The memory being used by the menu is marked by the game as free, so as soon as something new (such as a particle) allocates that memory, it will be being used for two different, conflicting, purposes at the same time. The number of ways the memory could end up reused is immense, which is why the effects can be so unpredictable.
lua script used to visualize dynamic memory: pastebin.com/wEj2Bgxe
