Calls to sha3-update that did not completely fill an already partially filled buffer were handled incorrectly, in that the buffer-index wasn't properly updated. Thanks to Orivej Desh for the bug report.