Fix CVE-2021-3421: Be much more careful about copying data from the signature header