s/Q_ASSERT()/if()/g in CoreSession. Core shouldn't crash on bogus client data.