How to safely submit Memory Tagging crash ogs to developers?

lah23

Memory Tagging itself doesn't prevent exploitation, does it? For example, I know of a third party app that triggers Memory Tagging notification. This does not mean that Memory Tagging itself somehow prevents exploitation when it detects an error, does it?

Where are Memory Tagging reports/logs stored? How do I submit them to developers without disclosing senastive device information?

de0u

lah23 If a program crashes due to an MTE event, the program is no longer running. If the MTE event was due to an attempted exploit of the program, the attacker's influence over the program ended when the program crashed.

MTE crash dumps include a stack trace providing information about the program's path before the crash. They may reveal information about which features of the program you were using, but will not generally include your IP address, account names, etc.

lah23

There was not a crash, but a notification about detection of memory corruption. Does such detection prevent exploitation?

de0u

lah23 There was not a crash, but a notification about detection of memory corruption.

What sort of notification?

lah23

That Memory Tagging detected an error for whatever app.

de0u

lah23 And the program was suddenly no longer running?