The temporary XY buffer passed to the scrypt_smix C function should be 256r+64 bytes in length, but the Haskell code was only allocating 256r bytes, causing the additional 64 to be written past the end of the buffer. See #91.