fix(rtc): guard remote track event handlers against racing disconnect

track_published, track_subscribed, track_unsubscribed and
track_subscription_failed looked up the remote participant (and
publication) with an unguarded dict access, raising KeyError when the
participant had already been removed by a racing participant_disconnected
or unpublish. This mirrors the defensive lookup already applied to
track_unpublished in #743, using fresh locals and skipping the emit with
a debug log when the entry is gone instead of letting _listen_task log a
KeyError.

Author: AKomplished-bug

livekit-rtc/livekit/rtc/room.py

@@ -817,10 +817,19 @@ def _on_room_event(self, event: proto_room.RoomEvent) -> None:
             lpublication._first_subscription.set_result(None)
             self.emit("local_track_subscribed", lpublication.track)
         elif which == "track_published":
-            rparticipant = self._remote_participants[event.track_published.participant_identity]
-            rpublication = RemoteTrackPublication(event.track_published.publication)
-            rparticipant._track_publications[rpublication.sid] = rpublication
-            self.emit("track_published", rpublication, rparticipant)
+            # The participant may already have been removed by a racing
+            # disconnect or a duplicate event, so the lookup is done defensively
+            # and the emit is skipped when the participant is gone, mirroring the
+            # track_unpublished handler, instead of raising a KeyError that
+            # _listen_task logs as an error.
+            identity = event.track_published.participant_identity
+            rp = self._remote_participants.get(identity)
+            if rp is not None:
+                rpub = RemoteTrackPublication(event.track_published.publication)
+                rp._track_publications[rpub.sid] = rpub
+                self.emit("track_published", rpub, rp)
+            else:
+                logger.debug("track_published for untracked participant %s", identity)
         elif which == "track_unpublished":
             # The participant or publication may already have been removed by a
             # racing disconnect or a duplicate event, so both lookups are done
@@ -839,41 +848,77 @@ def _on_room_event(self, event: proto_room.RoomEvent) -> None:
             else:
                 logger.debug("track_unpublished for untracked participant %s", identity)
         elif which == "track_subscribed":
+            # The participant or publication may already have been removed by a
+            # racing disconnect or unpublish, so both lookups are done
+            # defensively and the emit is skipped when either entry is gone,
+            # mirroring the track_unpublished handler, instead of raising a
+            # KeyError that _listen_task logs as an error.
             owned_track_info = event.track_subscribed.track
             track_info = owned_track_info.info
-            rparticipant = self._remote_participants[event.track_subscribed.participant_identity]
-            rpublication = rparticipant.track_publications[track_info.sid]
-            rpublication._subscribed = True
-            if track_info.kind == TrackKind.KIND_VIDEO:
-                remote_video_track = RemoteVideoTrack(owned_track_info)
-                remote_video_track._set_room(self)
-                rpublication._track = remote_video_track
-                self.emit("track_subscribed", remote_video_track, rpublication, rparticipant)
-            elif track_info.kind == TrackKind.KIND_AUDIO:
-                remote_audio_track = RemoteAudioTrack(owned_track_info)
-                remote_audio_track._set_room(self)
-                rpublication._track = remote_audio_track
-                self.emit("track_subscribed", remote_audio_track, rpublication, rparticipant)
+            identity = event.track_subscribed.participant_identity
+            rp = self._remote_participants.get(identity)
+            rpub = rp.track_publications.get(track_info.sid) if rp is not None else None
+            if rp is not None and rpub is not None:
+                rpub._subscribed = True
+                if track_info.kind == TrackKind.KIND_VIDEO:
+                    remote_video_track = RemoteVideoTrack(owned_track_info)
+                    remote_video_track._set_room(self)
+                    rpub._track = remote_video_track
+                    self.emit("track_subscribed", remote_video_track, rpub, rp)
+                elif track_info.kind == TrackKind.KIND_AUDIO:
+                    remote_audio_track = RemoteAudioTrack(owned_track_info)
+                    remote_audio_track._set_room(self)
+                    rpub._track = remote_audio_track
+                    self.emit("track_subscribed", remote_audio_track, rpub, rp)
+            else:
+                logger.debug(
+                    "track_subscribed for untracked participant %s or publication %s",
+                    identity,
+                    track_info.sid,
+                )
         elif which == "track_unsubscribed":
+            # The participant or publication may already have been removed by a
+            # racing disconnect or unpublish, so both lookups are done
+            # defensively and the emit is skipped when either entry is gone,
+            # mirroring the track_unpublished handler, instead of raising a
+            # KeyError that _listen_task logs as an error.
             identity = event.track_unsubscribed.participant_identity
-            rparticipant = self._remote_participants[identity]
-            rpublication = rparticipant.track_publications[event.track_unsubscribed.track_sid]
-            rtrack = rpublication.track
-            if rtrack is not None:
-                rtrack._set_room(None)
-            rpublication._track = None
-            rpublication._subscribed = False
-            self.emit("track_unsubscribed", rtrack, rpublication, rparticipant)
+            rp = self._remote_participants.get(identity)
+            rpub = (
+                rp.track_publications.get(event.track_unsubscribed.track_sid)
+                if rp is not None
+                else None
+            )
+            if rp is not None and rpub is not None:
+                rtrack = rpub.track
+                if rtrack is not None:
+                    rtrack._set_room(None)
+                rpub._track = None
+                rpub._subscribed = False
+                self.emit("track_unsubscribed", rtrack, rpub, rp)
+            else:
+                logger.debug(
+                    "track_unsubscribed for untracked participant %s or publication %s",
+                    identity,
+                    event.track_unsubscribed.track_sid,
+                )
         elif which == "track_subscription_failed":
+            # The participant may already have been removed by a racing
+            # disconnect, so the lookup is done defensively and the emit is
+            # skipped when the participant is gone, instead of raising a KeyError
+            # that _listen_task logs as an error.
             identity = event.track_subscription_failed.participant_identity
-            rparticipant = self._remote_participants[identity]
-            error = event.track_subscription_failed.error
-            self.emit(
-                "track_subscription_failed",
-                rparticipant,
-                event.track_subscription_failed.track_sid,
-                error,
-            )
+            rp = self._remote_participants.get(identity)
+            if rp is not None:
+                error = event.track_subscription_failed.error
+                self.emit(
+                    "track_subscription_failed",
+                    rp,
+                    event.track_subscription_failed.track_sid,
+                    error,
+                )
+            else:
+                logger.debug("track_subscription_failed for untracked participant %s", identity)
         elif which == "track_muted":
             identity = event.track_muted.participant_identity
             # TODO: pass participant identity