output: #fixed code
                                  @Override
      public Health health() {
          boolean allPassed = true;
          Health.Builder builder = new Health.Builder();
          for (SofaRuntimeManager sofaRuntimeManager : SofaFramework.getRuntimeSet()) {
              Biz biz = DynamicJvmServiceProxyFinder.getBiz(sofaRuntimeManager);
              if (biz == null) {
                  continue;
              }
  
              if (!sofaRuntimeManager.isLivenessHealth()) {
                  allPassed = false;
                  builder.withDetail(String.format("Biz: %s health check", biz.getIdentity()),
                      "failed");
              } else {
                  builder.withDetail(String.format("Biz: %s health check", biz.getIdentity()),
                      "passed");
              }
          }
          if (allPassed) {
              return builder.up().build();
          } else {
              return builder.down().build();
          }
      }
input: #vulnerable code 
                                  @Override
      public Health health() {
          boolean allPassed = true;
          Health.Builder builder = new Health.Builder();
          for (SofaRuntimeManager sofaRuntimeManager : SofaFramework.getRuntimeSet()) {
              if (!sofaRuntimeManager.isLivenessHealth()) {
                  allPassed = false;
                  builder.withDetail(
                      String.format("Biz: %s health check",
                          DynamicJvmServiceProxyFinder.getBiz(sofaRuntimeManager).getIdentity()),
                      "failed");
              } else {
                  builder.withDetail(
                      String.format("Biz: %s health check",
                          DynamicJvmServiceProxyFinder.getBiz(sofaRuntimeManager).getIdentity()),
                      "passed");
              }
          }
          if (allPassed) {
              return builder.up().build();
          } else {
              return builder.down().build();
          }
      } 
                              #location 10 
                              #vulnerability type NULL_DEREFERENCE