sql/password.c: check for buffer overflow in check_scramble_323 (BUG#7187)

sql/password.c:
  check for buffer overflow in check_scramble_323

sql/password.c

@@ -216,7 +216,8 @@ check_scramble_323(const char *scrambled, const char *message,
   randominit(&rand_st,hash_pass[0] ^ hash_message[0],
              hash_pass[1] ^ hash_message[1]);
   to=buff;
-  for (pos=scrambled ; *pos ; pos++)
+  DBUG_ASSERT(sizeof(buff) > SCRAMBLE_LENGTH_323);
+  for (pos=scrambled ; *pos && to < buff+sizeof(buff) ; pos++)
     *to++=(char) (floor(my_rnd(&rand_st)*31)+64);
   if (pos-scrambled != SCRAMBLE_LENGTH_323)
     return 1;