4.2.1.7 The entry test

  Problem:  Intel's CET security feature requires that the first instruction in a program be ENDBR
  Fix By:   Compile statup code with -fcf-protection
  Waive If: The application will not run on the latest Intel hardware

  Example:  FAIL: entry test because instruction at entry is not ENDBR32
  Example:  FAIL: entry test because instruction at entry is not ENDBR64

This test checks to make sure that the first instruction in a program for the x86_64 architectures is ENDBR. This is needed as part of Intel’s CET security feature. (See The cf-protection test for more details on CET).

If necessary the test can be disabled via the --skip-entry option and re-enabled via the --test-entry option.