crash on modify ellipse into circle

[private_lock]

Steps to reproduce:

- start new document
- draw ellipse (wider than tall)
- release mouse-button
- ctrl-left-click size-handler to modify into circle
- a window appears telling, inkscape crashed and a tempfile was saved in home-folder
- the circle is drawn in the background

Version:
holger 14:25:00 OK 8 2005 ~
$ uname -a
Linux Meerschweinchen 4.15.0-36-generic #39-Ubuntu SMP Mon Sep 24 16:19:09 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
holger 14:25:07 OK 9 2006 ~
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 18.04.1 LTS
Release: 18.04
Codename: bionic
holger 14:25:08 OK 10 2007 ~
$ dpkg -l 'plasma-workspace' '*inkscape*'
Gewünscht=Unbekannt/Installieren/R=Entfernen/P=Vollständig Löschen/Halten
| Status=Nicht/Installiert/Config/U=Entpackt/halb konFiguriert/
         Halb installiert/Trigger erWartet/Trigger anhängig
|/ Fehler?=(kein)/R=Neuinstallation notwendig (Status, Fehler: GROSS=schlecht)
||/ Name Version Architektur Beschreibung
+++-==============-============-============-=================================
ii inkscape 0.92.3-1 amd64 vector-based drawing program
ii plasma-workspa 4:5.12.6-0ub amd64 Plasma Workspace for KF5
holger 14:29:01 OK 11 2008 ~
$

[Alvin Penner (apenner)]

confirmed on Windows 10, Inkscape 0.92.3 (2405546, 2018-03-11)

unfortunately, I was not able to obtain a backtrace

[Alvin Penner (apenner)]

crash reproduced on Windows 10, Inkscape 0.92.3 (90c76b1, 2018-10-02)

backtrace:
Program received signal SIGSEGV, Segmentation fault.
0x6ac7df2a in libinkscape_base!_ZN8SPObject5buildEP10SPDocumentPN8Inkscape3XML4NodeE ()
   from c:\app\temp\inkscape_0.92.x\libinkscape_base.dll
(gdb) bt
#0 0x6ac7df2a in libinkscape_base!_ZN8SPObject5buildEP10SPDocumentPN8Inkscape3XML4NodeE ()
   from c:\app\temp\inkscape_0.92.x\libinkscape_base.dll
#1 0x6ac9364f in libinkscape_base!_ZN7SPShape5buildEP10SPDocumentPN8Inkscape3XML4NodeE ()
   from c:\app\temp\inkscape_0.92.x\libinkscape_base.dll
#2 0x6ac2b6f6 in libinkscape_base!_ZN10NodeTraits15get_type_stringB5cxx11ERKN8Inkscape3XML4NodeE ()
   from c:\app\temp\inkscape_0.92.x\libinkscape_base.dll
#3 0x6ac7c2d1 in libinkscape_base!_ZN8SPObject11child_addedEPN8Inkscape3XML4NodeES3_ ()
   from c:\app\temp\inkscape_0.92.x\libinkscape_base.dll
#4 0x6ac614bd in libinkscape_base!_ZN9SPLPEItem11child_addedEPN8Inkscape3XML4NodeES3_ ()
   from c:\app\temp\inkscape_0.92.x\libinkscape_base.dll
#5 0x0d23bd78 in ?? ()
#6 0x0721bd20 in ?? ()
#7 0x6ae64ec0 in libinkscape_base!_ZN12straightener5RouteD1Ev () from c:\app\temp\inkscape_0.92.x\libinkscape_base.dll
#8 0x6b17cda4 in libinkscape_base!_ZZNK11PairingHeapIPN4vpsc10ConstraintEE15combineSiblingsEP8PairNodeIS2_EE9treeArray ()
   from c:\app\temp\inkscape_0.92.x\libinkscape_base.dll
#9 0x6ae64f00 in libinkscape_base!_ZN13CheckProgressD0Ev () from c:\app\temp\inkscape_0.92.x\libinkscape_base.dll
#10 0x6ae64ef0 in libinkscape_base!_ZN13ArcKnotHolderD1Ev () from c:\app\temp\inkscape_0.92.x\libinkscape_base.dll
#11 0x6ae64f10 in libinkscape_base!_ZN13CheckProgressD1Ev () from c:\app\temp\inkscape_0.92.x\libinkscape_base.dll
#12 0x00000000 in ?? ()
(gdb) c
Continuing.

Program received signal SIGSEGV, Segmentation fault.
0x6ac7df2a in libinkscape_base!_ZN8SPObject5buildEP10SPDocumentPN8Inkscape3XML4NodeE ()
   from c:\app\temp\inkscape_0.92.x\libinkscape_base.dll
(gdb) c
Continuing.
[Inferior 1 (process 4056) exited with code 030000000005]

[private_lock (private-lock)]

Shift-left-click on end of arc to complete into full ellipse also crashes.

[Mc (mc...)]

reproduced in 0.92.x, not reproduced in master

[Mc (mc...)]

(no useful backtrace in .92.x)

[Alvin Penner (apenner)]

similar to Bug 1522085
https://bugs.launchpad.net/inkscape/+bug/1522085