pem2der.c: fix double-free bug

Found with Clang's `scan-build` tool.

load_file() allocates memory to a char** parameter. It then tries to fread() a
file, and if that fails, frees the memory and returns to caller. However, the
char** is not reset to NULL, which causes a double-free error when the caller
later passes it to free().
diff --git a/programs/util/pem2der.c b/programs/util/pem2der.c
index 5386fdb..dfd7a49 100644
--- a/programs/util/pem2der.c
+++ b/programs/util/pem2der.c
@@ -134,6 +134,7 @@
     {
         fclose( f );
         free( *buf );
+        *buf = NULL;
         return( -1 );
     }