Audacious - OLD, PLEASE USE GITHUB DISCUSSIONS/ISSUES

I was able to trigger an easily reproducible crash through the D-Bus interface. The org.atheme.audacious.SongTuple method does not valid the requested tuple in do_song_tuple before calling get_value_type. This triggers an assert in get_value_type, but could potentially still crash otherwise. Instead of a crash, I'd expect either an empty string or an error to be returned.

The crash can be reproduced with:

dbus-send --session --print-reply --dest=org.atheme.audacious /org/atheme/audacious org.atheme.audacious.SongTuple uint32:0 string:x

It crashes with the following backtrace:

#0  0x00007ffff638afeb in raise () at /lib64/libc.so.6
#1  0x00007ffff63755c1 in abort () at /lib64/libc.so.6
#2  0x00007ffff6375491 in _nl_load_domain.cold.0 () at /lib64/libc.so.6
#3  0x00007ffff6383752 in  () at /lib64/libc.so.6
#4  0x00007ffff7bb1d26 in Tuple::get_value_type(Tuple::Field) const (this=this@entry=0x7fffffffc970, field=field@entry=Tuple::Invalid) at tuple.cc:450
#5  0x000055555555f66d in do_song_tuple(_ObjAudacious*, _GDBusMethodInvocation*, unsigned int, char const*) (obj=0x5555557a4ce0, invoc=0x555555cf3260, pos=0, key=<optimized out>)
    at dbus-server.cc:644
#6  0x00007ffff5a6e03e in ffi_call_unix64 () at /lib64/libffi.so.6
#7  0x00007ffff5a6d9ff in ffi_call () at /lib64/libffi.so.6
#8  0x00007ffff73795a5 in g_cclosure_marshal_generic () at /lib64/libgobject-2.0.so.0
#9  0x00007ffff7378add in g_closure_invoke () at /lib64/libgobject-2.0.so.0
#10 0x00007ffff738bf43 in signal_emit_unlocked_R () at /lib64/libgobject-2.0.so.0
#11 0x00007ffff739419f in g_signal_emitv () at /lib64/libgobject-2.0.so.0
#12 0x000055555556a01a in _obj_audacious_skeleton_handle_method_call (connection=<optimized out>, sender=<optimized out>, object_path=<optimized out>, interface_name=0x7fffd4018f80 "org.atheme.audacious", method_name=0x7fffd40193a0 "SongTuple", parameters=<optimized out>, invocation=0x555555cf3260, user_data=0x5555557a4ce0) at aud-dbus.c:15178
#13 0x00007ffff76970f6 in g_dbus_interface_method_dispatch_helper () at /lib64/libgio-2.0.so.0
#14 0x00007ffff767eb50 in call_in_idle_cb () at /lib64/libgio-2.0.so.0
#15 0x00007ffff709a1cb in g_idle_dispatch () at /lib64/libglib-2.0.so.0
#16 0x00007ffff709d8ad in g_main_context_dispatch () at /lib64/libglib-2.0.so.0
#17 0x00007ffff709dc78 in g_main_context_iterate.isra () at /lib64/libglib-2.0.so.0
#18 0x00007ffff709dfa2 in g_main_loop_run () at /lib64/libglib-2.0.so.0
#19 0x00007fffcd32695f in gtk_main () at /lib64/libgtk-x11-2.0.so.0
#20 0x00007ffff7b9c85e in interface_run() () at interface.cc:163
#21 0x00007ffff7baffd6 in aud_run() () at runtime.cc:323
#22 0x000055555555e774 in main (argc=<optimized out>, argv=<optimized out>) at main.cc:395
#23 0x00007ffff637724b in __libc_start_main () at /lib64/libc.so.6
#24 0x000055555555ed7a in _start () at main.cc:410

I'm running into this with Audacious 3.10-beta1 (from https://copr.fedorainfracloud.org/coprs/mschwendt/audacious-next/).