picasm -- buffer overflow vulnerability

Shaun Colley reports:

When generating error and warning messages, picasm copies
strings into fixed length buffers without bounds
checking.
If an attacker could trick a user into assembling a
source file with a malformed ‘error’ directive, arbitrary
code could be executed with the privileges of the user.
This could result in full system compromise.