/usr/lib/llvm-21/bin/llvm-cfi-verify

OVERVIEW: Identifies whether Control Flow Integrity protects all indirect control flow instructions in the provided object file, DSO or binary.
Note: Anything statically linked into the provided file *must* be compiled with '-g'. This can be relaxed through the '--ignore-dwarf' flag.
USAGE: llvm-cfi-verify [options] <input file> [ignorelist file]

OPTIONS:

CFI Verify Options:

  --blame-context=<uint>     - Print the blame context (if possible) for BAD instructions. This specifies the number of lines of context to include, where zero disables this feature.
  --blame-context-all=<uint> - Prints the blame context (if possible) for ALL instructions. This specifies the number of lines of context for non-BAD instructions (see --blame-context). If --blame-context is unspecified, it prints this number of contextual lines for BAD instructions as well.
  --print-graphs             - Print graphs around indirect CF instructions in DOT format.
  --summarize                - Print the summary only.

Color Options:

  --color                    - Use colors in output (default=autodetect)

Generic Options:

  --help                     - Display available options (--help-hidden for more)
  --help-list                - Display list of available options (--help-list-hidden for more)
  --version                  - Display the version of this program