Protect objects in Parcel::appendFrom

* only aquire objects within the range supplied to appendFrom
* don't append over existing objects
* unset the mObjectsSorted flag a couple more cases
* keep mObjectPositions sorted

Flag: EXEMPT bug fix
Ignore-AOSP-First: security fix
Test: binder_parcel_fuzzer
Bug: 402319736
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:517f23af4b4acd44d17394e16a6a42709ccb453c)
(cherry picked from commit 0abce000697a6e9dda217766338c7f1149179b98)
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:e870fdf57b48c0558d905522053185979a7cc12b)
Merged-In: I63715fdd81781aaf04f5fc0cb8bdb74c09d5d807
Change-Id: I63715fdd81781aaf04f5fc0cb8bdb74c09d5d807