Comment 6 for bug 1863260

We have found a fix for the issue now. There was one part of the hypervisor build which does use completely different flags. In particular it does not use -mindirect-branch, so it will not fail if cf-protection is turned on (this is under xen/arch/x86/boot and uses a buikd32.mk for setting flags). After adding -fcf-protection=none to build32.mk as well, the resulting hypervisor binary boots.

@doko, just one additional observation: the documentation sounds a bit like -mindirect-branch=thunk-external is only incompatible with -fcf-protection=full|branch but practically it seems only none is accepted. That might be correct or not, I am not sure.

Think after all, we can close this as invalid (for gcc-9).