That looks right to me.
Should there perhaps be a vague mention here that the compiler defaults
have been changed, but if in doubt mention the name of the options that
cause the compiler to do so?
The compiler options are different between arm64 and amd64. Because the
teams didn't talk and convinced llvm do do both?!?!. Well, the arm64
mechanism is slightly more powerful and expressive, but this split is a
cognitive load the development community did not need. It will retard
deployment pace.
This is the table?
enable BTCFI (our default) disable BTICFI
----------------------------------------------------------------------------
amd64 -fcf-protection=branch -fcf-protection=none
arm64 -mbranch-protection=bti -mbranch-protection=none
I figure the folk who are going to tweak the link-time flag to say "this
does not work", would also like to play with these options to check the
issue they see isn't related to something else.
