The crash appears in AudioOutputCoreConfBridge::on_property_changed method. It was introduced by commit 5e1efe8f. Fixes bug #640982.