attempt to repro the issue in ci

Author: terrelln

.github/workflows/dev-short-tests.yml

@@ -409,6 +409,7 @@ jobs:
     - name: ARM64
       if: ${{ matrix.name == 'ARM64' }}
       run: |
+        LDFLAGS="-static -z force-bti" MOREFLAGS="-mbranch-protection=standard" CC=$XCC QEMU_SYS=$XEMU make clean check
         LDFLAGS="-static" CC=$XCC QEMU_SYS=$XEMU make clean check
     - name: PPC
       if: ${{ matrix.name == 'PPC' }}

lib/decompress/huf_decompress_amd64.S

@@ -15,6 +15,18 @@
  */
 #if defined(__ELF__) && defined(__GNUC__)
 .section .note.GNU-stack,"",%progbits
+
+.pushsection .note.gnu.property, "a"
+.balign 8
+.long 4                 /* size of the name - "GNU\0" */
+.long 0x10              /* size of descriptor */
+.long 0x5               /* NT_GNU_PROPERTY_TYPE_0 */
+.asciz "GNU"
+.long 0xc0000000        /* pr_type - GNU_PROPERTY_AARCH64_FEATURE_1_AND */
+.long 4                 /* pr_datasz - 4 bytes */
+.long 1                 /* pr_data - GNU_PROPERTY_AARCH64_FEATURE_1_BTI */
+.long 0                 /* pr_padding - bring everything to 8 byte alignment */
+.popsection
 #endif
 
 #if ZSTD_ENABLE_ASM_X86_64_BMI2