Comment 8 for bug 1646020

Here is a patch in case it's helpful.

This might just be a bandaid over a deeper issue (how does a package have no names?), but at least it stops the bleeding. I didn't put the validation around *all* get_pkgnames calls because they don't seem to be running into the problem.