Bug#1113774: Disabling -fcf-protection in sudo for bookworm

Stefano Rivera <[email protected]> Tue, 2 Sep 2025 15:03:13 +0000

Newsgroups	gmane.linux.debian.devel.ctte
Message-ID	<h63tyj6yp52c4hoglynhlajetnowjnsefkznicdp4jbfl5rsd4__26848.1779772387$1756825883$gmane$org@aodm52fty2xx>

Hi Marcos (2025.09.02_14:35:01_+0000)
>They do not, however, support ENDBR32 which was introduced in 2020,
>twenty-five years after the introduction of the original i686
>(https://www.intel.com/content/www/us/en/developer/articles/technical/technical-look-control-flow-enforcement-technology.html).

It seems that the intention of the new instruction was to be interpreted 
as a NOP on older hardware, but that obviously didn't happen on these 
non-Intel CPUs.

Stefano