#vulnerable code 
                                protected boolean showTagBody( Permission p ) {
        return getSecurityContext().implies( p );
    } 
                            #location 2 
                            #vulnerability type NULL_DEREFERENCE
#fixed code
                                protected boolean showTagBody( Permission p ) {
        return getSecurityContext() != null && getSecurityContext().implies( p );
    }