#fixed code
                                public static Configure toConfigure(String toString) {
        final Configure configure = new Configure();
        final String[] pvs = split(toString, ";");
        for (String pv : pvs) {
            try {
                final String[] stringSplitArray = split(pv, "=");
                final String p = stringSplitArray[0];
                final String v = decode(stringSplitArray[1]);
                final Field field = getField(Configure.class, p);
                if( null != field ) {
                    set(field, valueOf(field.getType(), v), configure);
                }
            } catch (Throwable t) {
                //
            }
        }
        return configure;
    }
#vulnerable code 
                                public static Configure toConfigure(String toString) {
        final Configure configure = new Configure();
        final String[] pvs = split(toString, ";");
        for (String pv : pvs) {
            try {
                final String[] stringSplitArray = split(pv, "=");
                final String p = stringSplitArray[0];
                final String v = decode(stringSplitArray[1]);
                final Field field = getField(Configure.class, p);
                set(field, valueOf(field.getType(), v), configure);
            } catch (Throwable t) {
                //
            }
        }
        return configure;
    } 
                            #location 10 
                            #vulnerability type NULL_DEREFERENCE