Segfault when inserting note in attached file, linked pitch and tab staff

GIT commit: efb6d19

Another segfault when inserting a note. I've attached a file where it can be easily reproduced. Just load it, hit n, arrow right 8 times to the first free measure, hit e to insert an e, and boom. I'm using Ubuntu 12.04. Stack trace:

expand voice: found Rest 2/4
makeGap 1/8 at 1920 track 0
remove Rest 2/4 at tick 1920 track 0
makeGap: remove 2/4 at 1920
makeGap: 1/8 removed 3/8 too much
dList: 2

gap at tick 1920+240
addClone Rest at 2160 1/8
addClone Rest at 2400 1/4
Segment::add(Chord) there is already an Rest at 3:0:0(1920) track 4
1/8 -> 2/4

Program received signal SIGABRT, Aborted.
0x00007ffff1aff445 in raise () from /lib/x86_64-linux-gnu/libc.so.6
(gdb) bt
#0 0x00007ffff1aff445 in raise () from /lib/x86_64-linux-gnu/libc.so.6
#1 0x00007ffff1b02bab in abort () from /lib/x86_64-linux-gnu/libc.so.6
#2 0x0000000000ade05d in Segment::add (this=0x5c7ae10, el=0x1864b40) at /home/johan/Projects/MuseScore/libmscore/segment.cpp:489
#3 0x0000000000ad17b2 in Score::addElement (this=0x5bdd610, element=0x1864b40) at /home/johan/Projects/MuseScore/libmscore/score.cpp:1400
#4 0x0000000000b45176 in AddElement::redo (this=0x1e59f50) at /home/johan/Projects/MuseScore/libmscore/undo.cpp:1267
#5 0x0000000000b403d8 in UndoStack::push (this=0x5ad91c0, cmd=0x1e59f50) at /home/johan/Projects/MuseScore/libmscore/undo.cpp:236
#6 0x0000000000ad9653 in Score::undo (this=0x5bdd610, cmd=0x1e59f50) at /home/johan/Projects/MuseScore/libmscore/score.cpp:3219
#7 0x0000000000b44894 in Score::undoAddCR (this=0x5bdd610, cr=0x1c62a40, measure=0x5c7a660, tick=1920) at /home/johan/Projects/MuseScore/libmscore/undo.cpp:1153
#8 0x0000000000b50683 in Score::setNoteRest (this=0x5bdd610, segment=0x5c7ae10, track=0, nval=..., sd=..., stemDirection=MScore::AUTO) at /home/johan/Projects/MuseScore/libmscore/cmd.cpp:603
#9 0x0000000000a40652 in Score::putNote (this=0x5bdd610, p=..., replace=true) at /home/johan/Projects/MuseScore/libmscore/edit.cpp:781
#10 0x00000000006a575d in ScoreView::cmdAddPitch (this=0x5bebcd0, note=2, addFlag=false) at /home/johan/Projects/MuseScore/mscore/scoreview.cpp:4777
#11 0x0000000000699aca in ScoreView::cmd (this=0x5bebcd0, a=0x1abeec0) at /home/johan/Projects/MuseScore/mscore/scoreview.cpp:2438
#12 0x00000000007af390 in MuseScore::cmd (this=0x1a39f80, a=0x1abeec0, cmd=...) at /home/johan/Projects/MuseScore/mscore/musescore.cpp:4418
#13 0x00000000007ad41e in MuseScore::cmd (this=0x1a39f80, a=0x1abeec0) at /home/johan/Projects/MuseScore/mscore/musescore.cpp:4054
#14 0x0000000000673fce in MuseScore::qt_static_metacall (_o=0x1a39f80, _c=QMetaObject::InvokeMetaMethod, _id=49, _a=0x7fffffffc1d0)
at /home/johan/Projects/MuseScore/build.debug/mscore/moc_musescore.cxx:583
#15 0x00007ffff3947281 in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib/x86_64-linux-gnu/libQtCore.so.4
#16 0x00007ffff43e0c9f in QActionGroup::triggered(QAction*) () from /usr/lib/x86_64-linux-gnu/libQtGui.so.4
#17 0x00007ffff43e0d27 in ?? () from /usr/lib/x86_64-linux-gnu/libQtGui.so.4
#18 0x00007ffff3947281 in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib/x86_64-linux-gnu/libQtCore.so.4
#19 0x00007ffff43de132 in QAction::triggered(bool) () from /usr/lib/x86_64-linux-gnu/libQtGui.so.4
#20 0x00007ffff43de31f in QAction::activate(QAction::ActionEvent) () from /usr/lib/x86_64-linux-gnu/libQtGui.so.4
#21 0x00007ffff43de48f in QAction::event(QEvent*) () from /usr/lib/x86_64-linux-gnu/libQtGui.so.4
#22 0x00007ffff43e4894 in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/lib/x86_64-linux-gnu/libQtGui.so.4
#23 0x00007ffff43e9713 in QApplication::notify(QObject*, QEvent*) () from /usr/lib/x86_64-linux-gnu/libQtGui.so.4
#24 0x00007ffff3932e9c in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib/x86_64-linux-gnu/libQtCore.so.4
#25 0x00007ffff44168b9 in ?? () from /usr/lib/x86_64-linux-gnu/libQtGui.so.4
#26 0x00007ffff4417d8a in ?? () from /usr/lib/x86_64-linux-gnu/libQtGui.so.4
#27 0x00007ffff43eaf92 in QApplication::notify(QObject*, QEvent*) () from /usr/lib/x86_64-linux-gnu/libQtGui.so.4
#28 0x00007ffff3932e9c in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib/x86_64-linux-gnu/libQtCore.so.4
#29 0x00007ffff4488c49 in ?? () from /usr/lib/x86_64-linux-gnu/libQtGui.so.4
#30 0x00007ffff44890bb in ?? () from /usr/lib/x86_64-linux-gnu/libQtGui.so.4
#31 0x00007ffff4463637 in QApplication::x11ProcessEvent(_XEvent*) () from /usr/lib/x86_64-linux-gnu/libQtGui.so.4
#32 0x00007ffff448d0d2 in ?? () from /usr/lib/x86_64-linux-gnu/libQtGui.so.4
#33 0x00007fffefaa0d53 in g_main_context_dispatch () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#34 0x00007fffefaa10a0 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#35 0x00007fffefaa1164 in g_main_context_iteration () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#36 0x00007ffff39623bf in QEventDispatcherGlib::processEvents(QFlags) () from /usr/lib/x86_64-linux-gnu/libQtCore.so.4
#37 0x00007ffff448cd5e in ?? () from /usr/lib/x86_64-linux-gnu/libQtGui.so.4
#38 0x00007ffff3931c82 in QEventLoop::processEvents(QFlags) () from /usr/lib/x86_64-linux-gnu/libQtCore.so.4
#39 0x00007ffff3931ed7 in QEventLoop::exec(QFlags) () from /usr/lib/x86_64-linux-gnu/libQtCore.so.4
#40 0x00007ffff3936f67 in QCoreApplication::exec() () from /usr/lib/x86_64-linux-gnu/libQtCore.so.4
#41 0x00000000007a24d0 in main (argc=1, av=0x7fffffffe238) at /home/johan/Projects/MuseScore/mscore/musescore.cpp:2475
(gdb)