In the daemon's handle_sdp_client_query_result callback, the calls to socket_connection_send_packet are done with a NULL connection, which will crash the daemon.

What version of the product are you using? On what operating system? Present in the latest r2640.

I've changed the code to store the connection in a global of daemon. not pretty, but at least it works for a single parallel SDP query now.