It turns out that flatpak_dir_remote_fetch_summary can return TRUE, yet leave summary_bytes NULL. The code further down does not deal gracefully with summary_bytes being NULL, so error out early instead of crashing.