Comment 2 for bug 168695

warning before trying this:
the cursor gets stuck system wide (at least in linux mint)
with the tool used when inkscape crashed,
one can only move the mouse but clicking doesn't work.

how to get it unstuck:
I have setup a hotkey for the system monitor
and am able to bring it up and kill gdb,
which also shuts down inkscape and releases the mouse.

you have been warned, on to the crash:
While drawing a rectangle and one presses ctrl + z,
inkscape crashes with the following messages:

** (inkscape:11240): WARNING **: Incomplete undo transaction:

** (inkscape:11240): WARNING **: Event: Set attribute style to "stroke-width:32;fill:#2b0000;stroke:none;fill-opacity:1" on #<Element:0x0xaf77e70>

** (inkscape:11240): WARNING **: Event: Added #<Element:0x0x926e570> to #<Element:0x0xaf77e70> after beginning

** (inkscape:11240): WARNING **: Event: Set attribute id to "rect3270" on #<Element:0x0xaf77e70>

** (inkscape:11240): WARNING **: Event: Set attribute width to "0" on #<Element:0x0xaf77e70>

** (inkscape:11240): WARNING **: Event: Set attribute height to "0" on #<Element:0x0xaf77e70>

** (inkscape:11240): WARNING **: Event: Set attribute x to "0" on #<Element:0x0xaf77e70>

** (inkscape:11240): WARNING **: Event: Set attribute y to "0" on #<Element:0x0xaf77e70>

** (inkscape:11240): WARNING **: Event: Set attribute transform to "translate(-7.3563764e-6,0)" on #<Element:0x0xaf77e70>

** (inkscape:11240): WARNING **: Event: Set attribute style to "fill:#2b0000;fill-opacity:1;stroke:none" on #<Element:0x0xaf77e70>

everything above is the same,
and most of the time it crashes with this as the last message:
*** Error in `/usr/bin/inkscape': corrupted double-linked list: 0x0b85cae0 ***

but i have seen it crash with just the following two messages at the end:

** (inkscape:11334): CRITICAL **: void SPObject::requestDisplayUpdate(unsigned int): assertion `this->document != NULL' failed

Program received signal SIGSEGV, Segmentation fault.
0x081d6b24 in ?? ()

and now while i was trying it before posting,
the last message was just:

Program received signal SIGSEGV, Segmentation fault.
0x081d6b24 in ?? ()

it happens with the shape tools, rect, circle, star, spiral,
but not with the freehand, bezier or calligraphic brush, or eraser,
probably because they don't draw anything until the mouse is released.

the spray tool gives alot of warning messages but doesn't seam to crash inkscape.

Tested with:
r12833 on linux mint 15 cinnamon 32bit