Skip to content
Free public beta until December 4, 2026: every course is open, no card needed. After that, the first chapter of each course stays free and full access is a one-time $39 ($19 for up to 100 founding members chosen for helpful feedback). Your progress is kept. How the beta works

branch target identification

The ARM64 counterpart of indirect branch tracking: indirect branches may only land on a bti marker instruction in pages marked as guarded.

ARMv8.5 BTI marks executable pages as guarded; in them, an indirect branch must land on a compatible bti c/j/jc instruction (or a pac*sp prologue), otherwise a branch target exception is raised; enabled with -mbranch-protection=bti or =standard.

See also

pointer authentication indirect branch tracking prologue branch target
Read the full section →