>Ehm, maybe not. As Jason points out, the typedef does not have quite >the right type, so that is most likely the culprit, and this >workaround would trigger CFI in exactly the same way. > >Interestingly, the compiler does not seem to mind, right? Or are you >seeing any build time warnings on the reference to blake2s_compress in >the call to __blake2s_update() ? No, no warnings as the -Wcast-function-type is globally enabled. I cleaned some cast-function-type errors but no warnings in __blake2s_update. Miles