From 98d783d44814c9d400efa8d0b2697c9c6358ead3 Mon Sep 17 00:00:00 2001
From: Jeremy Long <jeremy.long@gmail.com>
Date: Sun, 4 Sep 2016 18:51:07 -0400
Subject: [PATCH] added todo for NPE reasons

---
 .../java/org/owasp/dependencycheck/data/cpe/CpeMemoryIndex.java  | 1 +
 1 file changed, 1 insertion(+)

diff --git a/dependency-check-core/src/main/java/org/owasp/dependencycheck/data/cpe/CpeMemoryIndex.java b/dependency-check-core/src/main/java/org/owasp/dependencycheck/data/cpe/CpeMemoryIndex.java
index a61543053..d6677cd71 100644
--- a/dependency-check-core/src/main/java/org/owasp/dependencycheck/data/cpe/CpeMemoryIndex.java
+++ b/dependency-check-core/src/main/java/org/owasp/dependencycheck/data/cpe/CpeMemoryIndex.java
@@ -209,6 +209,7 @@ public final class CpeMemoryIndex {
 
                 final Set<Pair<String, String>> data = cve.getVendorProductList();
                 for (Pair<String, String> pair : data) {
+                    //todo figure out why there are null products
                     if (pair.getLeft() != null && pair.getRight() != null) {
                         v.setStringValue(pair.getLeft());
                         p.setStringValue(pair.getRight());