[hid] Fix GetReport buffer overrun

Fix a potential buffer overrun in GetReport where
a malicious USB device could have a report size
greater than HID_MAX_REPORT_LEN.

Bug 50622: Fixed

Change-Id: I7cf36d004dcae7bdfffa5d1a355279fae7efe500
Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/383179
Commit-Queue: David Gilhooley <dgilhooley@google.com>
Reviewed-by: Suraj Malhotra <surajmalhotra@google.com>
Reviewed-by: Andres Oportus <andresoportus@google.com>
Testability-Review: Suraj Malhotra <surajmalhotra@google.com>
Testability-Review: Andres Oportus <andresoportus@google.com>