Fix a bug in the parsing of UTF-8 policies leading to a panic.

CHANGELOG.md

@@ -2,6 +2,14 @@
 
 All notable changes to this project will be documented in this file.
 
+## [16.0.1] - 2026-09-29
+
+### Bug Fixes
+
+- Fix a bug due to unproper handling of UTF-8 characters in the policy parsing
+  that causes a runtime panic. The fix restricts the range of expressible
+  policies to the ones only using ASCII characters.
+
 ## [16.0.0] - 2026-02-13
 
 ### 🚀 Features

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "cosmian_cover_crypt"
-version = "16.0.0"
+version = "16.0.1"
 authors = [
   "Théophile Brezot <theophile.brezot@cosmian.com>",
   "Bruno Grieder <bruno.grieder@cosmian.com>",

src/abe/policy/access_policy.rs

@@ -91,6 +91,11 @@ impl AccessPolicy {
     ///
     /// - "DPT::MKG DPT::FIN"
     pub fn parse(mut e: &str) -> Result<Self, Error> {
+        if !e.is_ascii() {
+            return Err(Error::InvalidBooleanExpression(
+                "non-ascii character used".to_owned(),
+            ));
+        }
         let seeker = |c: &char| !"()|&".contains(*c);
         let mut q = LinkedList::<Self>::new();
         loop {
@@ -303,5 +308,6 @@ mod tests {
         assert!(AccessPolicy::parse("D1").is_err());
         assert!(AccessPolicy::parse("D1::A (&& D2::A || D2::B)").is_err());
         assert!(AccessPolicy::parse("|| D2::B").is_err());
+        assert!(AccessPolicy::parse("(é::à && (ó::ï) || ø::ú)").is_err());
     }
 }