#fixed code
                                @Test
    public void testGetLocationOfClass() throws Exception {
        // Class from project dependencies
        Assert.assertThat(TypeUtils.getLocationOfClass(TypeUtils.class).toASCIIString(), Matchers.containsString("/classes/"));

        // Class from JVM core
        String expectedJavaBase = "/rt.jar";
        if (JDK.IS_9)
            expectedJavaBase = "/java.base/";

        Assert.assertThat(TypeUtils.getLocationOfClass(String.class).toASCIIString(), Matchers.containsString(expectedJavaBase));
    }
#vulnerable code 
                                @Test
    public void testGetLocationOfClass() throws Exception {
        // Classes from maven dependencies
        Assert.assertThat(TypeUtils.getLocationOfClass(Assert.class).toASCIIString(), Matchers.containsString("repository"));

        // Class from project dependencies
        Assert.assertThat(TypeUtils.getLocationOfClass(TypeUtils.class).toASCIIString(), Matchers.containsString("/classes/"));

        // Class from JVM core
        String expectedJavaBase = "/rt.jar";
        if (JDK.IS_9)
            expectedJavaBase = "/java.base/";

        Assert.assertThat(TypeUtils.getLocationOfClass(String.class).toASCIIString(), Matchers.containsString(expectedJavaBase));
    } 
                            #location 4 
                            #vulnerability type NULL_DEREFERENCE