#fixed code
                                private List<BOBRequestDetail> getRequestBOBDetails() {
        if (requestBOBDetails == null) {
            List<String> detailLines = getDetailLines();

            if (detailLines == null) return null;

            BOBRequestDetail detail;
            requestBOBDetails = new ArrayList<>();
            for (String detailLine : detailLines) {
                detail = parseDetailLinesToRequestBOBDetail(detailLine);
                requestBOBDetails.add(detail);
            }
        }

        return requestBOBDetails;
    }
#vulnerable code 
                                private List<BOBRequestDetail> getRequestBOBDetails() {
        if (requestBOBDetails == null) {
            List<String> detailLines = getDetailLines();

            if (detailLines == null) return null;

            BOBRequestDetail detail;
            requestBOBDetails = new ArrayList<>();
            for (String detailLine : detailLines) {
                detail = parseDetailLinesToRequestBOBDetail(detailLine);

                setNonGMGValues(detail); //FSIS-2993
                //2018.04.28 address type must be upper case
                if(StringUtils.isNotEmpty(detail.getAddressType())) {
                    detail.setAddressType(detail.getAddressType().toUpperCase());
                }

                requestBOBDetails.add(detail);
            }
        }

        return requestBOBDetails;
    } 
                            #location 15 
                            #vulnerability type NULL_DEREFERENCE