Why does Thunderbird 52.1.1 keep crashing? @ CCGraphBuilder::BuildGraph and @ OOM | small (win7) (sophos_detoured.dll)
One of the PCs at work running Thunderbird 52.1.1 keeps crashing and I'd greatly appreciate any help in figuring out why this is. This has been happening over a period of weeks, often many times per day. The crash manifests itself by Thunderbird freezing, then shortly afterwards the crash reporter popping up and proclaiming that Thunderbird has had a problem and crashed.
I have tried disabling all extensions and starting Thunderbird in safe mode. This didn't help. Below are latest crash reports. You can see from the crash report on 01.06.2017 and 12.06.2017 that no extensions were enabled.
As you can also see from the reports, the PC is running Win 7.
- 2107.05.18 - https://crash-stats.mozilla.com/report/index/4c45f61f-fda5-4357-87c9-c11270170518
- 2107.05.22 - https://crash-stats.mozilla.com/report/index/29465d69-d234-4054-b86c-ed7720170522
- 2107.05.22 - https://crash-stats.mozilla.com/report/index/81032d31-72d8-4d01-bc44-889a60170522
- 2107.05.22 - https://crash-stats.mozilla.com/report/index/7341240f-3bfe-46fe-a5ed-5c7ae0170522
- 2107.05.29 - https://crash-stats.mozilla.com/report/index/9a1fd218-8698-4f62-8b79-0cf840170529
- 2107.05.29 - https://crash-stats.mozilla.com/report/index/d94f17bf-53de-4702-bcaf-772de0170529
- 2107.05.29 - https://crash-stats.mozilla.com/report/index/f35d9c9b-d864-4713-b332-013e60170529
- 2107.06.01 - https://crash-stats.mozilla.com/report/index/b248e0c1-49e1-4f8b-9f8e-176e00170601
- 2017.06.09 - https://crash-stats.mozilla.com/report/index/0a7d85e6-1a72-4fa2-8080-6ca590170609
- 2107.06.12 - https://crash-stats.mozilla.com/report/index/d87eca86-c742-495a-adc5-2b32a0170612
Please let me know if I can provide any further information.
Modified by Wayne Mery
All Replies (9)
It looks like you're using Sophos Anti-Virus. If it's set to scan email, what happens if you disable that option? A better test is to start Windows in safe mode and see if TB still crashes.
sfhowes said
If it's set to scan email, what happens if you disable that option?
Ok, thanks. I can certainly test that on Monday (colleague isn't there tomorrow).
A better test is to start Windows in safe mode and see if TB still crashes.
If the above doesn't help I can try that, too. I'll let you know if that makes a difference.
Modified by JackZelig
yes, very keen to hear your results
I had a look at the PC today and couldn't find any setting that indicates Sophos is scanning email. I did find a bunch of "real-time protection" features however and wouldn't be surprised if one of these is doing just that.
Now, I've started searching for anything that gives me a clue on how to make Sophos and Thunderbird play nicely. I found this page (Thunderbird:Testing:Antivirus Related Performance Issues) which indicates that some instructions once existed, but the page that page links to is broken.
If anyone reading this has an idea of how to configure Sophos to not scan email / ignore Thunderbird, please let me know (we're using Sophos Endpoint Security and Control for Windows).
In the meantime, the PC didn't crash in the last few days, so I'll wait for that to happen (or not) and post back here with more information as/when it does.
Modified by JackZelig
I found this discussion that seems to suggest that EPSC doesn't scan email, but nevertheless it might be necessary to add the TB profile folder as an Exclusion in Sophos (also) to avoid crashes, if indeed the crashes are caused by Sophos.
Modified by sfhowes
That is very helpful. Thank you! I will keep you posted as to how this progresses.
it would appear sophos_detoured.dll is a part of the sophos buffer overrun protection.
See https://community.sophos.com/kb/en-us/36501
This DLL is "injected" into every process running on a windows machine. I suggest you try disabling the buffer overrun protection and see if the crashes stop.
Thank you. That gives me much more to go on than I had.
Just wanted to follow up with this: basically (much to my relief) the problem went away with the update to 52.2.0.
Thanks for all the help.
Modified by JackZelig