tree 79448a7b8ccfb8531fbec1f241a853b2b911baa9
parent 578b016fdc91464c08c096f0c5952cae549fdb8f
author Kent Yoder <key@linux.vnet.ibm.com> 1343243642 -0500
committer Kent Yoder <key@linux.vnet.ibm.com> 1345651909 -0500

tpm: fix double write race and tpm_release free issue

Moved the atomic_set of the data_pending variable until after the
tpm_read has completed processing. The existing code had a window of
time where a second write to the driver could clobber the tpm command
buffer.

Also fixed an issue where if close was called on the tpm device before a
read completed, the tpm command buffer would be returned to the OS,
which could contain sensitive information.

Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>