fix(verify): gate JIT verification to amd64 until trampolines are hardened

verify/call_arm64.go

@@ -8,7 +8,6 @@ package verify
 import (
 	"encoding/binary"
 	"fmt"
-	"reflect"
 	"syscall"
 	"unsafe"
 )
@@ -23,12 +22,12 @@ func enterJIT(fn uintptr, stack uintptr)
 //go:nosplit
 func leaveJIT()
 
-// leaveJITAddr is the machine address of leaveJIT.
-var leaveJITAddr uintptr
+// leaveJITAddr is the raw ABI0 address of leaveJIT, handed over by the
+// GLOBL/DATA in trampoline_arm64.s (reflect would return the interposed
+// ABIInternal wrapper instead).
+var leaveRawAddr uintptr
 
-func init() {
-	leaveJITAddr = reflect.ValueOf(leaveJIT).Pointer()
-}
+var leaveJITAddr = leaveRawAddr
 
 const stackPad = 64