Correctness - Method call passes null for nonnull parameter