commit b4b1920f7a7c36f7ea71d431e159f9a08be3102a
author Gilles Peskine <Gilles.Peskine@arm.com> Fri Aug 08 13:28:22 2025 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> Fri Aug 08 17:17:04 2025 +0200
tree 08d053bcabede882d6c62375fae9995a88038489
parent 7db50d070043c94c9c49a5860a23ab72afb97b65

We now run some tests with MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND

Addresses https://github.com/Mbed-TLS/mbedtls/issues/9586 .

This is not a fully satisfactory resolution, because we don't run every
constant-flow test with Valgrind in PR jobs, only a small subset. We should
improve the coverage/resource balance.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

tests/scripts/analyze_outcomes.py

diff --git a/tests/scripts/analyze_outcomes.py b/tests/scripts/analyze_outcomes.py
index 9d03d1d..7b43145 100755
--- a/tests/scripts/analyze_outcomes.py
+++ b/tests/scripts/analyze_outcomes.py
@@ -98,9 +98,6 @@
             'Config: MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY',
             'Config: MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY',
             'Config: MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY',
-            # We don't run test_suite_config when we test this.
-            # https://github.com/Mbed-TLS/mbedtls/issues/9586
-            'Config: MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND',
         ],
         'test_suite_config.psa_boolean': [
             # We don't test with HMAC disabled.