On Fri, 2018-01-05 at 06:25 +0100, Florian Weimer wrote: > > Retpoline also looks incompatible with CET, so future Intel CPUs will > eventually need a different approach anyway.
CPUs with CET will have the indirect branch problem fixed, so the retpoline ALTERNATIVE will be used which is a bare 'jmp *%reg'. That's why we switched the ABI for the retpoline from having the target address on the stack, to passing it in in a register.
smime.p7s
Description: S/MIME cryptographic signature