#vulnerable code 
                                @Address(Addr.Authority.PERMISSION_BY_ROLE)
    public Future<JsonArray> fetchAsync(final String roleId) {
        if (Ut.notNil(roleId)) {
            return Ux.Jooq.on(RRolePermDao.class)
                    .fetchAsync(KeField.ROLE_ID, roleId)
                    .compose(Ux::fnJArray);
        } else return Ux.futureJArray();
    } 
                            #location 5 
                            #vulnerability type NULL_DEREFERENCE
#fixed code
                                @Address(Addr.Authority.PERMISSION_BY_ROLE)
    public Future<JsonArray> fetchAsync(final String roleId) {
        return Fn.getEmpty(Ux.futureJArray(), () -> Ux.Jooq.on(RRolePermDao.class)
                .fetchAsync(KeField.ROLE_ID, roleId)
                .compose(Ux::fnJArray), roleId);
    }