The attached patch fixes that. It should fix also a number of other situation where cursor may be invalidated. I had to add a test in Cursor::fixIfBroken() for the case were we are not inside an Inset but in the main Text.
Nice! Testing it for a few minutes now. Looks fine. Couldn't cause a crash yet.
Stefan
PGP.sig
Description: Signierter Teil der Nachricht