#fixed code
                                @Override
    public byte[] serialize(Object obj) throws IOException {
        return SerializerManager.me().getSerializer(config.getSerializer()).serialize(obj);
    }
#vulnerable code 
                                @Override
    public byte[] serialize(Object obj) throws IOException {
        return Jboot.me().getSerializer().serialize(obj);
    } 
                            #location 3 
                            #vulnerability type NULL_DEREFERENCE