Depends on how the CLA is worded. It's possible for the CLA to have the contributor retain all copyright over their contributions (thus preventing the maintainer from pulling a 180 and suddenly licensing the contributed code commercially) while still forcing the contributor to assert that what they made is not stolen code.