Fix sanitizer in handleTransitionLocked.

The loop as constructed in handleTransitionLocked potentially leads to
two unsigned integer overflows on the i = 0 loop on integer sanitized
builds.

 runtime error: unsigned integer overflow: 0 - 1 cannot be represented in
 type 'size_t' (aka 'unsigned long')

 runtime error: unsigned integer overflow: 18446744073709551615 + 1
 cannot be represented in type 'size_t' (aka 'unsigned long')

This refactors the loop to prevent the overflow.

Bug: 30969751
Test: Compiles, device boots.

Change-Id: Ia660dffbee3da9667d5e266cc85798eb458660ac