Notice: there is an edit at the bottom guys.
Sad news everyone. After further research, I can't seem to exploit FE:Fates.
Here are my findings:
Due to the way the inventory data is stored in the save data (complete unorganized mess), a buffer overflow is not feasible.
After that, I went for another attack, attacking character data.
The character data is stored in a way that there could be a way to stack overflow the data (the bane/boon data is stored after the name data with some arbitrary data in between. This also has many flaws. Example: You cannot overflow the name, as they made it like this:
(Before Name Data)....C.o.r.r.i.n......(After Name Data)
So unless someone figures out how to overflow those arbitrary bits of the name, there is nothing we can do about the name data overflow idea, nor a good entry point from FE:Fates.
If one manages to exploit this, it won't be me.
Sorry to get anyone's hopes up, but I said originally it wasn't very likely.
EDIT: The name stuff is just UTF16, so there might be a way... (Thanks shinyquagsire23)
Sad news everyone. After further research, I can't seem to exploit FE:Fates.
Here are my findings:
Due to the way the inventory data is stored in the save data (complete unorganized mess), a buffer overflow is not feasible.
After that, I went for another attack, attacking character data.
The character data is stored in a way that there could be a way to stack overflow the data (the bane/boon data is stored after the name data with some arbitrary data in between. This also has many flaws. Example: You cannot overflow the name, as they made it like this:
(Before Name Data)....C.o.r.r.i.n......(After Name Data)
So unless someone figures out how to overflow those arbitrary bits of the name, there is nothing we can do about the name data overflow idea, nor a good entry point from FE:Fates.
If one manages to exploit this, it won't be me.
Sorry to get anyone's hopes up, but I said originally it wasn't very likely.
EDIT: The name stuff is just UTF16, so there might be a way... (Thanks shinyquagsire23)
Last edited by seijinshu,