#vulnerable code 
                                @Test
    public void testAllConstants() {

        
        Configuration configuration =
                SwissKnife.loadConfigurationFromClasspathInUtf8("conf/all_constants.conf", this
                        .getClass());

        assertEquals("LANGUAGES", configuration.getString(NinjaConstant.applicationLanguages));
        
        assertEquals("PREFIX", configuration.getString(NinjaConstant.applicationCookiePrefix));

        assertEquals("NAME", configuration.getString(NinjaConstant.applicationName));
        
        assertEquals("SECRET", configuration.getString(NinjaConstant.applicationSecret));
        
        assertEquals("SERVER_NAME", configuration.getString(NinjaConstant.serverName));

        assertEquals(9999, configuration.getInt(NinjaConstant.sessionExpireTimeInSeconds));

        assertEquals(false, configuration.getBoolean(NinjaConstant.sessionSendOnlyIfChanged));

        assertEquals(false, configuration.getBoolean(NinjaConstant.sessionTransferredOverHttpsOnly));

    } 
                            #location 9 
                            #vulnerability type NULL_DEREFERENCE
#fixed code
                                @Test
    public void testAllConstants() {

        
        Configuration configuration =
                SwissKnife.loadConfigurationInUtf8("conf/all_constants.conf");

        assertEquals("LANGUAGES", configuration.getString(NinjaConstant.applicationLanguages));
        
        assertEquals("PREFIX", configuration.getString(NinjaConstant.applicationCookiePrefix));

        assertEquals("NAME", configuration.getString(NinjaConstant.applicationName));
        
        assertEquals("SECRET", configuration.getString(NinjaConstant.applicationSecret));
        
        assertEquals("SERVER_NAME", configuration.getString(NinjaConstant.serverName));

        assertEquals(9999, configuration.getInt(NinjaConstant.sessionExpireTimeInSeconds));

        assertEquals(false, configuration.getBoolean(NinjaConstant.sessionSendOnlyIfChanged));

        assertEquals(false, configuration.getBoolean(NinjaConstant.sessionTransferredOverHttpsOnly));

    }