CVE-2022-37454: Fix buffer overflows in _sha3 module