netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check

stable inclusion
from linux-4.19.191
commit e11924b7513ceacd7e9a0ed9f8db60629eefbf12

--------------------------------

[ Upstream commit 5e024c32 ]

Do not assume that the tcph->doff field is correct when parsing for TCP
options, skb_header_pointer() might fail to fetch these bits.

Fixes: 11eeef41 ("netfilter: passive OS fingerprint xtables match")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Yang Yingliang <yangyingliang@huawei.com>