Arbitrary Code Execution

Overview

Arbitrary Code Execution (ACE) is the most powerful class of speedrunning exploit. By manipulating game memory through careful input sequences, runners can make the game execute code of their choosing—including jumping directly to the ending or triggering credits.

Fast Facts

What: Execute custom code via gameplay
How: Memory manipulation through inputs
Result: Nearly anything possible
Category: Usually separated from “glitchless”

How ACE Works

Step	Process
1	Find memory corruption bug
2	Identify exploitable memory region
3	Craft input sequence as “code”
4	Trigger execution
5	Game runs crafted instructions

Prerequisites

ACE requires:

Requirement	Purpose
Memory overflow	Write to unintended locations
Controllable data	Player inputs become code
Execution trigger	Jump to corrupted area

Famous ACE Examples

Game	Achievement
Super Mario World	Credits warp via controller inputs
Pokemon	Complete control of game state
Zelda: OoT	Instant ending
Super Mario Bros. 3	Controller-based ACE

Categories and ACE

Category	ACE Status
Any%	Often allowed
No ACE	Common restriction
Glitchless	ACE prohibited
TAS	ACE demonstrations popular

Technical Depth

ACE demonstrates:

Concept	Application
Memory layout	How games store data
Code execution	How CPUs run programs
Security	Why bounds checking matters
Exploitation	General security concepts

TAS and ACE

Tool-Assisted Speedruns use ACE for:

Demonstrating theoretical exploits
Entertainment runs
Total game control
“Playaround” creativity

Educational Value

Understanding ACE teaches:

Computer architecture fundamentals
Security concepts
Memory management
Low-level programming

Legacy

ACE represents the ultimate mastery of a game—understanding it so completely that players can make it do anything, including things developers never imagined possible.

Playing the game's memory