in tfm_svcall_psa_reply() when the partition have stated that it want to allow a connection ( returns PSA_SUCCESS in psa_reply on PSA_IPC_CONNECT message) but the system is out of handles, the system will go into tfm_panic() which is not expected

if tfm_spm_create_conn_handle() returns PSA_NULL_HANDLE, that error code should return to the user
moreover the handle should be allocated before calling the partition, because in some scenarios a partition may allocate resources for that session and will not have any way to de-allocate them.