https://gcc.gnu.org/bugzilla/show_bug.cgi?id=96350
--- Comment #3 from Richard Biener <rguenth at gcc dot gnu.org> --- The endbr are way too short to make this practical - ISTR I raised this exact issue at a presentation about CET ... CET simply makes the gadget finding less likely to succeed. There's always the possibility that text relocations end up making ENDBR{32,64} appear. Eventually the assembler (and ld.so?) can receive a hardening flag to scan for those byte sequences.