On 26.11.2021 13:33, Andrew Cooper wrote: > --- a/xen/arch/x86/arch.mk > +++ b/xen/arch/x86/arch.mk > @@ -46,6 +46,12 @@ CFLAGS-$(CONFIG_INDIRECT_THUNK) += > -mindirect-branch=thunk-extern > CFLAGS-$(CONFIG_INDIRECT_THUNK) += -mindirect-branch-register > CFLAGS-$(CONFIG_INDIRECT_THUNK) += -fno-jump-tables > > +ifdef CONFIG_HAS_CC_CET_IBT > +CFLAGS += -fcf-protection=branch -mmanual-endbr
Don't you mean to check XEN_IBT here rather than the underlying compiler capability? Jan
