crypt32: Fix missing size check in CSignedEncodeMsg_Open. Don't access CMS fields before checking cbSize.