When would I not wish to enable “Control Flow Guard” in Microsoft Visual Studio?

Question

To quote from MSDN:

Control Flow Guard (CFG) is a highly-optimized platform security feature that was created to combat memory corruption vulnerabilities. By placing tight restrictions on where an application can execute code from, it makes it much harder for exploits to execute arbitrary code through vulnerabilities such as buffer overflows.

We strongly encourage developers to enable CFG for their applications. You don't have to enable CFG for every part of your code, as a mixture of CFG enabled and non-CFG enabled code will execute fine. But failing to enable CFG for all code can open gaps in the protection. Furthermore, CFG enabled code works fine on "CFG-Unaware" versions of Windows and is therefore fully compatible with them.

So when would I not enable it?

Or in other words, what do I have to check about my code before I enable it and what are the risks?

Answer 1

Looks like it makes program to run slower. They do not say by how much, though. Plain language of the article suggests that all indirect calls are now going through kernel? If it is true, this is truly disastrous.