On 29/11/2021 09:27, Jan Beulich wrote: > On 26.11.2021 13:33, Andrew Cooper wrote: >> --- a/xen/arch/x86/arch.mk >> +++ b/xen/arch/x86/arch.mk >> @@ -46,6 +46,12 @@ CFLAGS-$(CONFIG_INDIRECT_THUNK) += >> -mindirect-branch=thunk-extern >> CFLAGS-$(CONFIG_INDIRECT_THUNK) += -mindirect-branch-register >> CFLAGS-$(CONFIG_INDIRECT_THUNK) += -fno-jump-tables >> >> +ifdef CONFIG_HAS_CC_CET_IBT >> +CFLAGS += -fcf-protection=branch -mmanual-endbr > Don't you mean to check XEN_IBT here rather than the underlying > compiler capability?
I did, and elsewhere in the patch (already fixed up). I added CONFIG_XEN_IBT rather late in the dev cycle, and missed a few conversions. ~Andrew
