This series fixes a reference count issue and a possible NULL pointer access in the TPM core code. It also introduces a new function tpm_chip_free() which is used as the counterpart to tpm_chip_alloc(). The function is supposed to hide the internals of a proper tpm_chip deallocation. Changes in v2: - drop the patch that erroneously cleaned up after failed installation of an action handler ni tpmm_chip_alloc() (pointed out by Jarkko Sakkinen) - make the commit message for patch 1 more detailed - add fixes tags and kernel logs Lino Sanfilippo (3): tpm: fix reference counting for struct tpm_chip tpm: Provide a function tpm_chip_free() to free tpm chips tpm: in tpm2_del_space check if ops pointer is still valid drivers/char/tpm/tpm-chip.c | 34 +++++++++++++++++++++++++++++++--- drivers/char/tpm/tpm.h | 1 + drivers/char/tpm/tpm2-space.c | 15 ++++++++++----- drivers/char/tpm/tpm_ftpm_tee.c | 4 ++-- drivers/char/tpm/tpm_vtpm_proxy.c | 2 +- 5 files changed, 45 insertions(+), 11 deletions(-) -- 2.7.4
