nothing should come in really at that point - but say IRQ#7 on older
platforms used to trigger at various points in time, even unprompted. Or
an APIC error interrupt in the last moment? All device irqs should
indeed be turned off at this stage, but since it costs us nothing to add
another cli, and because the failure mode is subtle memory corruption,
does it hurt to have it?
Ingo
--