msm: camera: isp: Handle array out of bounds

The pointer qbuf_buf comes from userspace.
qbuf_buf->num_planes is used with no bound check,
which if set to a large value, it will overflow
buf_info->mapped_info and qbuf_buf->planes

CRs-Fixed: 2003798

Bug: 38196031
Git-repo: https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit


Git-commit: 333a535f8323821b1d46b408f2305712640d1767
Change-Id: I332e0424e57bb14b481a740604a09350e6f029a8
Signed-off-by: Senthil Kumar Rajagopal <skrajago@codeaurora.org>
Signed-off-by: Dennis Cagle <d-cagle@codeaurora.org>