Re: [PATCH 3/5] x86/cfi: Add option for cfi=debug bootparam

[Kees Cook]

On Mon, Aug 25, 2025 at 05:59:23PM +0200, Peter Zijlstra wrote:
> On Mon, Aug 25, 2025 at 07:25:50AM -0700, Kees Cook wrote:
> 
> 
> > +   if (builtin && cfi_debug)
> > +           if (builtin && cfi_debug)
> > +           if (builtin && cfi_debug)
> > +           if (builtin && cfi_debug)
> > +           if (builtin && cfi_debug)
> > +           if (builtin && cfi_debug)
> > +           if (builtin && cfi_debug)
> > +           if (builtin && cfi_debug)
> > +           if (builtin && cfi_debug)
> 
> You could just make that cfi_debug and add:
> 
>       if (builtin)
>               cfi_debug = false;
> 
> at the very end of __apply_fineibt().

Oh sneaky! Yeah. Will do.

-- 
Kees Cook