pc-bios/optionrom: Drop -fcf-protection

Earlier this year, Ubuntu gcc packages turned on -fcf-protection
which causes build failures for the optionrom code likely because
it builds with -march=i486 and -fcf-protection is only supported
for i686 targets or newer.

Test: checkout and build trusty with GCC 11.2.0 or newer.
Bug: None
Change-Id: I735ab4b5d840254968217bfe016b9d52f483536f
diff --git a/pc-bios/optionrom/Makefile b/pc-bios/optionrom/Makefile
index a9a9e5e..9c31ba6 100644
--- a/pc-bios/optionrom/Makefile
+++ b/pc-bios/optionrom/Makefile
@@ -18,6 +18,7 @@
 # Drop -fstack-protector and the like
 QEMU_CFLAGS := $(filter -W%, $(QEMU_CFLAGS)) $(CFLAGS_NOPIE) -ffreestanding
 QEMU_CFLAGS += $(call cc-option, $(QEMU_CFLAGS), -fno-stack-protector)
+QEMU_CFLAGS += $(call cc-option, $(QEMU_CFLAGS), -fcf-protection=none)
 QEMU_CFLAGS += $(call cc-option, $(QEMU_CFLAGS), -m16)
 ifeq ($(filter -m16, $(QEMU_CFLAGS)),)
 # Attempt to work around compilers that lack -m16 (GCC <= 4.8, clang <= ??)