bar_cmd_modifier: fix use-after-free on error

Found through static analysis.

sway/commands/bar/modifier.c

@@ -22,9 +22,10 @@ struct cmd_results *bar_cmd_modifier(int argc, char **argv) {
 			mod |= tmp_mod;
 			continue;
 		} else {
-			free_flat_list(split);
-			return cmd_results_new(CMD_INVALID, "modifier",
+			error = cmd_results_new(CMD_INVALID, "modifier",
 				"Unknown modifier '%s'", split->items[i]);
+			free_flat_list(split);
+			return error;
 		}
 	}
 	free_flat_list(split);