为什么会出现内存溢出的问题

int main()
{
    char password[] = {0};
    for (int a = 1;a <= 3;a++) 
    {
        printf("请输入密码\n");
        scanf("%s", &password);
        if (strcmp(password,"123456")==0)
        {
            printf("输入正确\n");
            break;
        }
        else
            printf("输入错误，请重新输入\n");
        if (a == 3)
        {
            printf("三次输入均错误\n");
            break;
        }
    }
    return 0;
}

为什么会出现Run-Time Check Failure #2 - Stack around the variable 'password' was corrupted.这种问题

scanf("%s", &password)里把&去了，数组名就是数组首地址