New check for remaining bytes in ASN1Primitive.fromByteArray()

[THausherr]

I'm not yet sure if this is a bug or intended (maybe upcoming CVE?). In 1.85 new CMSSignedData(byte[]) checks whether there are remaining bytes and throws an exception in ASN1Primitive.fromByteArray() if there are. Which is what happens with PDF signatures because the length of the signature isn't known in advance, so the signature is written in a zero-allocated area. The change was made here:
ca74bb8
The workaround is to wrap the byte array in a ByteArrayInputStream :-(

[dghgit]

It's intended. Better to use the work around.