#8 Possible Bug NPE

[StefanLi]

In BootSecurityManager:
protected AppInstance getApplication(Window window) {

Iterator it = weakApplications.iterator();
while(it.hasNext()) {
AppInstance app = (AppInstance)it.next();
if(app == null) it.remove();

WeakVector windows = app.getWindows();
for(int i=0;i<windows.size();i++) {
Object w = windows.get(i);
if(w != null && w == window) return app;
}
}

return null;
}

is a possible null pointer dereference:
WeakVectors windows = app.getWindows();

A line above is a null check but this does not guard
app.getWindows()

Found by "Find bugs" :-) not me!

Stefan