I just posted an analysis over on the SDL blog of the lessons we learned from the recent animated curser (ANI) bug.