tpm_crb: fix address space of the return pointer in crb_map_res()