Ruby PKCS7 fails to verify when data contains line breaks

I find that when I call OpenSSL::PKCS7#verify, if the data to be verified contains line breaks, then verify returns false:

require 'openssl'
def test(data)
  store = OpenSSL::X509::Store.new
  signed = OpenSSL::PKCS7.sign(@cert, @key, data).to_der
  pkcs7 = OpenSSL::PKCS7.new(signed)
  valid = pkcs7.verify(pkcs7.certificates, store, data, OpenSSL::PKCS7::NOVERIFY)
end
@key = OpenSSL::PKey::RSA.new 2048
@cert = OpenSSL::X509::Certificate.new
@cert.serial = 0
@cert.public_key = @key.public_key
@cert.not_before = Time.now
@cert.not_after = Time.now + 2**12
@cert.sign @key, OpenSSL::Digest.new('SHA256')
test("foo")   # => true
test("foo\n") # => false

(I even have the NOVERIFY flag in the function call!)

Why does the presence of a line break change the behaviour? It has this effect regardless of where I put the line break in the data string. How can I verify a signature if the input string contains a line break?

This is Ruby 2.6.8p205.

After a lot of head scratching this seems to be expected behavior.
It's converting LF to CRLF before signing:

test("foo")     # => true
test("foo\n")   # => false
test("foo\r\n") # => true

To fix you need to use the BINARY flag:

signed = OpenSSL::PKCS7.sign(@cert, @key, data, nil, OpenSSL::PKCS7::BINARY).to_der

Now:

test("foo")     # => true
test("foo\n")   # => true
test("foo\r\n") # => true

Sources for this info:

> Normally the supplied content is translated into MIME canonical format (as required by the S/MIME specifications). If PKCS7_BINARY is set no translation occurs. This option should be used if the supplied data is in binary format otherwise the translation will corrupt it.

[1] https://www.openssl.org/docs/man3.1/man3/PKCS7_sign.html
[2] https://github.com/openssl/openssl/issues/9336
[3] https://opensource.apple.com/source/ruby/ruby-75/ruby/test/openssl/test_pkcs7.rb