[POWERPC] spufs: fix another off-by-one bug in spufs_mbox_read