[ci-scan] Test failure: ECKeyFileTests explicit NIST P-256 imports unexpectedly succeed on Azure Linux 4 #137151

Build Information

Build: https://dev.azure.com/dnceng-public/public/_build/results?buildId=1668850
Build error leg or test failing: linux-x64 Release Libraries_Release_CoreCLR-System.Security.Cryptography.Tests / ECKeyFileTests explicit NIST P-256 key imports
Queue: azurelinux.4.amd64.open.
Pipeline: runtime-extra-platforms, definition 154, main.
First build it occurred: https://dev.azure.com/dnceng-public/public/_build/results?buildId=1655451 (finished 2026-10-30; earliest verified occurrence in the sampled consoles, not a proven introducing build).
Follow-up build: https://dev.azure.com/dnceng-public/public/_build/results?buildId=1669782 (finished 2026-11-08), same assertions.

Error Details

Twenty-eight ReadWriteNistP256Explicit* cases in the ECDSA/ECDH Default/OpenSsl key-file test families expect an exception, but importing the explicit curve succeeds. Each fails Assert.ThrowsAny with expected type System.Exception. This is distinct from the two TestExplicitCurveImportOnUnsupportedPlatform cases expecting PlatformNotSupportedException; those are already covered by #137121.

The key-file assertion was verified in nine distinct source-and-prior builds: 1655451, 1657310, 1658360, 1659071, 1661087, 1663137, 1665174, 1667020, and 1668850, and again in follow-up 1669782. Ten prior monitors were inspected. Older builds without a readable affected crypto console do not establish a passing test or the introducing commit.

Representative complete failure block:

System.Security.Cryptography.EcDsa.Tests.ECDsaKeyFileTests_Default.ReadWriteNistP256ExplicitPkcs8_LimitedPrivate [FAIL]
  Assert.ThrowsAny() Failure: No exception was thrown
  Expected: typeof(System.Exception)
  Stack Trace:
    /_/src/libraries/Common/tests/System/Security/Cryptography/AlgorithmImplementations/EC/ECKeyFileTests.cs(1138,0): at System.Security.Cryptography.Tests.ECKeyFileTests`1.ReadWriteBase64Pkcs8(String base64Pkcs8, ECParameters& expected, Boolean isSupported)
    /_/src/libraries/Common/tests/System/Security/Cryptography/AlgorithmImplementations/EC/ECKeyFileTests.LimitedPrivate.cs(127,0): at System.Security.Cryptography.Tests.ECKeyFileTests`1.ReadWriteNistP256ExplicitPkcs8_LimitedPrivate()
    /_/src/coreclr/System.Private.CoreLib/src/System/Reflection/IntrinsicInvokeHelper.cs(837,0): at System.Reflection.IntrinsicInvokeHelper.Instance_Void_0(IntPtr fn, Object obj, IntPtr* _, RuntimeType __)
    /_/src/coreclr/System.Private.CoreLib/src/System/Reflection/MethodBaseInvoker.CoreCLR.cs(33,0): at System.Reflection.MethodBaseInvoker.InvokeWithSharedThunk(Object obj, IntPtr* args)
    /_/src/libraries/System.Private.CoreLib/src/System/Reflection/RuntimeMethodInfo.cs(134,0): at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

Error Message

{
  "ErrorMessage": "",
  "ErrorPattern": [
    "^[ ]*System\\.Security\\.Cryptography\\.(EcDsa|EcDiffieHellman)\\.Tests\\.(ECDsa|ECDh)KeyFileTests_(Default|OpenSsl)\\.ReadWriteNistP256Explicit[A-Za-z0-9_]+ \\[FAIL\\]\\r?$",
    "^[ ]*Assert\\.ThrowsAny\\(\\) Failure: No exception was thrown\\r?$",
    "^[ ]*Expected: typeof\\(System\\.Exception\\)\\r?$"
  ],
  "BuildRetry": false,
  "ExcludeConsoleLog": false
}

Filed by ci-failure-scan (detection only). ci-failure-fix walks open [ci-scan] KBEs and either opens a small fix PR or comments here to loop in owners — it never disables the test.

Generated by CI Outer-Loop Failure Scanner · copilot · gpt61 · ~347 AIC · ⌖ ~14 AIC · ⊞ 33.3K · ◷

Report

Summary