> > We were also worried about the indirect calls that are part of the > > paravirt interfaces when retpolines are not in place. > > > > How could those possibly be any worse than any other indirect call in > the kernel?
they're worse if they happen before you write the MSR that then protects them?