Camera: Fix heap OOB read/write in camera mappers

Change loop conditions in camera mappers (ZoomRatioMapper,
DistortionMapper, RotateAndCropMapper, and correctMeteringRegions)
to use `j + 5 <= entry.count` instead of `j < entry.count`.
This prevents heap out-of-bounds read and write when a
CaptureRequest contains a metering region with element count
that is not a multiple of 5.

Bug: 514726373
Test: cameraservice_test_host
Flag: EXEMPT BUGFIX
TAG=agy
CONV=e33154fc-dbf8-4f7d-ae71-88376924887a

(cherry picked from commit cc78e7aa1be9e586e9f2c54b6c638a6f13954891)
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610
Merged-In: I2edb88dbf20a1979ffb00e774cbb126fd9232cc1
Change-Id: I2edb88dbf20a1979ffb00e774cbb126fd9232cc1