msm: mdss: Fix for wrong length in copy_to_user

The caller could have a small buf passed (less then < blen).
Since, the length of count and blen is not checked, it can
write beyond the end of buf.

Change-Id: I569528ace02c7b7cd3f73a3bdb176e56cc5759f4
Signed-off-by: Rashi Bindra <rbindra@codeaurora.org>