Re: [PATCH 3/5] x86/cfi: Add option for cfi=debug bootparam

[Peter Zijlstra]

On Mon, Aug 25, 2025 at 07:25:50AM -0700, Kees Cook wrote:


> +     if (builtin && cfi_debug)
> +             if (builtin && cfi_debug)
> +             if (builtin && cfi_debug)
> +             if (builtin && cfi_debug)
> +             if (builtin && cfi_debug)
> +             if (builtin && cfi_debug)
> +             if (builtin && cfi_debug)
> +             if (builtin && cfi_debug)
> +             if (builtin && cfi_debug)

You could just make that cfi_debug and add:

        if (builtin)
                cfi_debug = false;

at the very end of __apply_fineibt().