We have found a fix for the issue now. There was one part of the hypervisor build which does use completely different flags. In particular it does not use -mindirect-branch, so it will not fail if cf- protection is turned on (this is under xen/arch/x86/boot and uses a buikd32.mk for setting flags). After adding -fcf-protection=none to build32.mk as well, the resulting hypervisor binary boots.
@doko, just one additional observation: the documentation sounds a bit like -mindirect-branch=thunk-external is only incompatible with -fcf- protection=full|branch but practically it seems only none is accepted. That might be correct or not, I am not sure. Think after all, we can close this as invalid (for gcc-9). -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1863260 Title: gcc-9 in Ubuntu generate unbootable xen hypervisor To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gcc-9/+bug/1863260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs