after more DUMPS i found that the call to AddCtrl is in Bar::Break()

void Bar::Break()
{
	AddCtrl(NULL, (int)Null);
}

as a test, i comment this line and it work without crash.