#vulnerable code 
                                @Override
    public <T> T deserialize(byte[] bytes, Class<T> clz) throws IOException {
        return (T) Jboot.me().getSerializer().deserialize(bytes);
    } 
                            #location 3 
                            #vulnerability type NULL_DEREFERENCE
#fixed code
                                @Override
    public <T> T deserialize(byte[] bytes, Class<T> clz) throws IOException {
        return (T) SerializerManager.me().getSerializer(config.getSerializer()).deserialize(bytes);
    }