Hi, > We should try to understand why CFI thinks the prototypes of the two > symbols are different. There are still a number of issues with CFI, so > papering over them by reverting stuff that we want for good reasons is > not the way to go imo. > > In the short term, you can work around it by avoiding the indirect > call to blake2s_compress, e.g., Thanks for the patch. I tried it and the issue remains. As Jason said, he cannot reproduce this issue. I will try another version of clang next. Miles