The high-level OpenPGP message reader now updates and verifies only those prefixed (non-one-pass) signatures whose PGPSignature was successfully initialised, so a message whose signer certificate was not supplied returns its plaintext with the signature unreported rather than throwing a NullPointerException out of read(), and the one-pass path no longer dereferences a null issuer key, relates to github #2417.