Connector/ODBC: malicious server's long version string wraps size_t PrefixLen via negative _snprintf return, causing heap out-of-bounds write

MariaDB Connector/ODBC formats every diagnostic message with a prefix that embeds the server version string. The prefix is built in `MADB_PutErrorPrefix` (driver/ma_error.cpp:165) with the driver's custom `_snprintf`, which returns a NEGATIVE value when the output is truncated …

int _snprintf(char *buffer, size_t count, const char *format, ...) {
    int result = vsnprintf(buffer, count, format, list);
    if (result > count) { return count - result - 1; }   // NEGATIVE
    return result;
}