[ARM] pxa: ensure mfp is in correct range in mfp_{read,write}