https://gcc.gnu.org/bugzilla/show_bug.cgi?id=98997
--- Comment #3 from Andy Lutomirski <luto at kernel dot org> --- What is -fcf-protection=stack actually supposed to do as compared to -fcf-protection=none? Is it valid to run code compiled with -fcf-protection=none with SHSTK enabled? If so, then I wonder why -fcf-protection=stack exists at all. If not, then I'm wondering why your patch seems to be effectively hardcoding "stack" mode for SJLJ? You could probably fix this bug differently by changing __builtin_setjmp() to store 0 for SSP in "none" mode. Then at least -fcf-protection=none wouldn't emit CET code.