[PATCH v3] staging/android/ion : fix a race condition in the ion driver

There is a use-after-free problem in the ion driver. This is caused by a race condition in the ion_ioctl() function. A handle has ref count of 1