Analysis shows that the XMLRPC-request contains an empty string (<string />) for the custom_type parameter, which is deserialized wrongly to a null-value, thus leading to the exception above. The attached patch (against r5967) fixes the symptom and uses "" for customType in that case.