https://gcc.gnu.org/bugzilla/show_bug.cgi?id=95605
Richard Biener <rguenth at gcc dot gnu.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |INVALID Status|WAITING |RESOLVED --- Comment #2 from Richard Biener <rguenth at gcc dot gnu.org> --- non-LTO objects are not taken into account here so I belive this isn't the reason you are not seeing the CF protection enabled.