netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()

netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()

[ Upstream commit 4fe4156c885d70986fb84c8e42d8e334a9457baf ]

nf_osf_find() incorrectly returns true on mismatch, this leads to
copying uninitialized memory area in nft_osf which can be used to leak
stale kernel stack data to userspace.

Fixes: f0c7ede2821c ("netfilter: nft_osf: Add version option support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>