#fixed code
                                boolean verifyPublicKey(){
        //verify the public-KEY-hashes  are the same
        byte[] publicKey = scriptSig.getPublicKey();
        byte[] reedmAccount = Utils.sha256hash160(Utils.sha256hash160(publicKey));
        if(Arrays.equals(reedmAccount,script.getPublicKeyDigest().getDigestBytes())){
            return true;
        }
        return false;
    }
#vulnerable code 
                                boolean verifyPublicKey(){
        //verify the public-KEY-hashes  are the same
        byte[] publicKey = scriptSig.getPublicKey();
        NulsDigestData digestData = NulsDigestData.calcDigestData(publicKey,NulsDigestData.DIGEST_ALG_SHA160);
        if(Arrays.equals(digestData.getDigestBytes(),script.getPublicKeyDigest().getDigestBytes())){
            return true;
        }
        return false;
    } 
                            #location 5 
                            #vulnerability type NULL_DEREFERENCE