#vulnerable code 
                             public void testHandle() throws SQLException {
		ResultSetHandler h = new BeanListHandler(TestBean.class);
		List results = (List) h.handle(this.rs);

		assertNotNull(results);
		assertEquals(ROWS, results.size());

		Iterator iter = results.iterator();
		TestBean row = null;
		while (iter.hasNext()) {
			row = (TestBean) iter.next();
			assertNotNull(row);
		}

		assertEquals("4", row.getOne());
		assertEquals("5", row.getTwo());
		assertEquals("6", row.getThree());
		assertEquals("not set", row.getDoNotSet());
	} 
                            #location 15 
                            #vulnerability type NULL_DEREFERENCE
#fixed code
                             public void testHandle() throws SQLException {
		ResultSetHandler h = new BeanListHandler(TestBean.class);
		List results = (List) h.handle(this.rs);

		assertNotNull(results);
		assertEquals(ROWS, results.size());

		Iterator iter = results.iterator();
		TestBean row = null;
        assertTrue(iter.hasNext());
        row = (TestBean) iter.next();
        assertEquals("1", row.getOne());
        assertEquals("2", row.getTwo());
        assertEquals("3", row.getThree());
        assertEquals("not set", row.getDoNotSet());
            
        assertTrue(iter.hasNext());
        row = (TestBean) iter.next();

        assertEquals("4", row.getOne());
        assertEquals("5", row.getTwo());
        assertEquals("6", row.getThree());
        assertEquals("not set", row.getDoNotSet());
        
        assertFalse(iter.hasNext());
	}