keith-packard wrote: Ok, I think this is a lot closer now -- I'm using the non-deprecated mechanism for generating the canary load instruction, although that required reworking the guard function API a bit. https://github.com/llvm/llvm-project/pull/110928