On 2026/04/09 21:49, Theo Buehler wrote:
> PS: Not a good moment to change this, but why do we have -arch
> suffixes for USE_NOBTCFI but not USE_NOEXECONLY?

I don't think we ran into it all that often before with USE_NOEXECONLY,
whereas USE_NOBTCFI was arch-specific in many cases so we wanted an
easier way to do it.

Adding the same handling post release would totally make sense.

> +# aws-lc-sys 0.36 has constants in .text
> +# https://github.com/awslabs/s2n-bignum/pull/242
> +.if ${MACHINE_ARCH} == "amd64"
> +USE_NOEXECONLY =	Yes
> +.endif

ok. (and thanks for finding krill).