* pkcs7: fix slice out-of-bounds panic * changelog * fix tests * add test case to capture panic; found in fuzzing * add fuzz test