Thunderbird crash when connecting to mail server

SVN 20902 + DBG + Thunderbird 1.07 + Real hardware

Thunderbird installs succesfully , then I can set up my mail account ans connect
to my mail server.

A reproductible bugckeck occurs when the Thunderbird client connects to my mail
server , as per debug log

(./ntoskrnl/ke/queue.c:420) Unwaiting Thread: 5
(lib\ntdll\ldr\utils.c:1190) LdrGetExportByName(): failed to find
SHSetUnreadMailCountW
(lib\ntdll\ldr\utils.c:1190) LdrGetExportByName(): failed to find
SHEnumerateUnreadMailAccountsW
(./ntoskrnl/ke/queue.c:420) Unwaiting Thread: 5
WARNING: NtUserGetKeyboardLayoutName at ./subsys/win32k/ntuser/keyboard.c:1263
is UNIMPLEMENTED!
WARNING: NtUserGetKeyboardLayoutName at ./subsys/win32k/ntuser/keyboard.c:1263
is UNIMPLEMENTED!
GDI32: GetOutlineTextMetricsA is unimplemented, please try again later.
GDI32: GetOutlineTextMetricsA is unimplemented, please try again later.
GDI32: GetOutlineTextMetricsA is unimplemented, please try again later.
GDI32: GetOutlineTextMetricsA is unimplemented, ple(./ntoskrnl/ke/queue.c:420)
Unwaiting Thread: 5
ase try again later.
WARNING: WSHGetSockaddrType at drivers\net\wshtcpip\wshtcpip.c:103 is
UNIMPLEMENTED!
WARNING: WSHGetSockaddrType at drivers\net\wshtcpip\wshtcpip.c:103 is
UNIMPLEMENTED!
GDI32: GetOutlineTextMetricsA is unimplemented, please try again later.
GDI32: GetOutlineTextMetricsA is unimplemented, please try again later.
GDI32: GetOutlineTextMetricsA is unimplemented, please try again later.
(KERNEL32:./lib/kernel32/mem/global.c:412) Memory Load: 44%
(lib\ntdll\ldr\utils.c:1190) LdrGetExportByName(): failed to find NODL_TABLE
(./ntoskrnl/ke/queue.c:420) Unwaiting Thread: 5
(./ntoskrnl/ke/queue.c:420) Unwaiting Thread: 5
(./ntoskrnl/mm/mm.c:300) Address: ffffffe4
Unhandled exception
ExceptionCode: c0000005
Faulting Address: ffffffe4
Address: 7c91a977 C:\reactos\system32\ntdll.dll
CS:EIP 1b:7c91a977
DS 23 ES 23 FS 3b GS 0
EAX: 00000000 EBX: ffffffe5 ECX: ffffffe3
EDX: 0000002e EBP: 00c6f76c ESI: 01c30611 ESP: 00c6f750
EDI: 00000000 EFLAGS: 00013282
Frames:
60340000+25a8 C:\Program Files\Mozilla Thunderbird\xpcom_compat.dll
60340000+5514 C:\Program Files\Mozilla Thunderbird\xpcom_compat.dll
400000+53b661 C:\Program Files\Mozilla Thunderbird\thunderbird.exe
400000+519d50 C:\Program Files\Mozilla Thunderbird\thunderbird.exe
400000+48384 C:\Program Files\Mozilla Thunderbird\thunderbird.exe
400000+48250 C:\Program Files\Mozilla Thunderbird\thunderbird.exe
602e0000+1a4c5 C:\Program Files\Mozilla Thunderbird\xpcom.dll
778b0c24<invalid address>
400000+21006d C:\Program Files\Mozilla Thunderbird\thunderbird.exe
8498b04<invalid address>
(./subsys/win32k/ntuser/class.c:137) Failed to lookup class atom (ClassName
'ComboBoxEx32')!
(./subsys/win32k/ntuser/class.c:137) Failed to lookup class atom (ClassName
'SysDateTimePick32')!
(./subsys/win32k/ntuser/class.c:137) Failed to lookup class atom (ClassName
'SysIPAddress32')!
(./subsys/win32k/ntuser/class.c:137) Failed to lookup class atom (ClassName
'SysMonthCal32')!
(./subsys/win32k/ntuser/class.c:137) Failed to lookup class atom (ClassName
'NativeFontCtl')!
(./subsys/win32k/ntuser/class.c:137) Failed to lookup class atom (ClassName
'SysPager')!
(./subsys/win32k/ntuser/window.c:581) thread cleanup: while destroy wnds,
wnd=0x8d1b76dc
(./subsys/win32k/ntuser/window.c:581) thread cleanup: while destroy wnds,
wnd=0x8d1d4684
(./subsys/win32k/ntuser/window.c:581) thread cleanup: while destroy wnds,
wnd=0x8d194b5c
(./subsys/win32k/ntuser/window.c:581) thread cleanup: while destroy wnds,
wnd=0x8d1cf3a4
(./subsys/win32k/ntuser/window.c:581) thread cleanup: while destroy wnds,
wnd=0x8d18ff84
(./subsys/win32k/ntuser/window.c:581) thread cleanup: while destroy wnds,
wnd=0x8d1f3714
(./subsys/win32k/ntuser/window.c:581) thread cleanup: while destroy wnds,
wnd=0x8d1f35dc
(./subsys/win32k/ntuser/window.c:581) thread cleanup: while destroy wnds,
wnd=0x8d1b65bc
(lib\rtl\exception.c:75) RtlRaiseStatus(Status 0xc0000005)
(./subsys/win32k/ntuser/message.c:1121) Failed to copy message to kernel:
invalid usermode buffer
(./subsys/win32k/ntuser/window.c:581) thread cleanup: while destroy wnds,
wnd=0x8d18d3dc
(./subsys/win32k/ntuser/window.c:581) thread cleanup: while destroy wnds,
wnd=0x8d1f34a4
(./subsys/win32k/ntuser/window.c:581) thread cleanup: while destroy wnds,
wnd=0x8d18be14
(./subsys/win32k/ntuser/window.c:581) thread cleanup: while destroy wnds,
wnd=0x8d1c655c
(drivers\fs\np\fsctrl.c:27) NpfsListeningCancelRoutine() called for
<\OLE_000001380000013c>
(drivers\fs\np\fsctrl.c:27) NpfsListeningCancelRoutine() called for
<{29F458BE-8866-11D5-A3DD-00B0D0F3BAA7}>
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle
0x1080257, caller needs to get ownership first!!!
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle
0x208025a, caller needs to get ownership first!!!
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle
0x508025d, caller needs to get ownership first!!!
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle
0x8080260, caller needs to get ownership first!!!
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle
0x4080263, caller needs to get ownership first!!!
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle
0x28080276, caller needs to get ownership first!!!
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle
0x5108027e, caller needs to get ownership first!!!
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle
0xa0802a2, caller needs to get ownership first!!!
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle
0x4b0802a6, caller needs to get ownership first!!!
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle
0xb0802aa, caller needs to get ownership first!!!
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle
0x190802ac, caller needs to get ownership first!!!
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle
0x60802ae, caller needs to get ownership first!!!
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle
0x70802b1, caller needs to get ownership first!!!
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle
0x830802b6, caller needs to get ownership first!!!
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle
0x55080284, caller needs to get ownership first!!!
KeBugCheckWithTf at ntoskrnl\ke\i386\exp.c:1327
A problem has been detected and ReactOS has been shut down to prevent damage to
your computer.

The problem seems to be caused by the following file: tcpip.sys

Technical information:

• • • STOP: 0x0000001E (0xc0000005,0x9d5a2ce9,0x00000000,0xccccccdc)

• • • tcpip.sys - Address 0x9d5a2ce9 base at 0x9d583000, DateStamp 0x0

Page Fault Exception: 14(0)
Processor: 0 CS:EIP 8:9d5a2ce9 <tcpip.sys:1fce9
(drivers/lib/oskittcp/oskittcp/uipc_socket.c:830 (soshutdown))>
cr2 ccccccdc cr3 26000 Proc: 80804c20 Pid: 4 <System> Thrd: 80809038 Tid: 18
DS 23 ES 23 FS 30 GS 0
EAX: 00000006 EBX: 00000002 ECX: 9d5b2a70
EDX: 00000000 EBP: 80745d30 ESI: cccccccc ESP: 80745cb0
EDI: 800bfa20 EFLAGS: 00010246 kESP 80745cb0 kernel stack base 80743000
Frames:
<tcpip.sys:15aa5 (drivers/lib/oskittcp/include/freebsd/src/sys/sys/proc.h:246
(OskitTCPShutdown))>
<tcpip.sys:dc11 (drivers/lib/ip/transport/tcp/tcp.c:620 (TCPDisconnect))>
<tcpip.sys:41d5 (drivers/net/tcpip/tcpip/dispatch.c:156 (DispDoDisconnect))>
<tcpip.sys:25c80 (drivers/lib/chew/workqueue.c:56 (ChewWorkItem))>
<ntoskrnl.exe:26d1a (./ntoskrnl/io/iowork.c:36 (IoWorkItemCallback))>
<ntoskrnl.exe:1daa3 (./ntoskrnl/ex/work.c:165 (ExpWorkerThreadEntryPoint))>
<ntoskrnl.exe:5a5f7 (./ntoskrnl/ps/thread.c:94 (PspSystemThreadStartup))>
<ntoskrnl.exe:618f5 (ntoskrnl\ke\i386\ctxswitch.S:82 (KiThreadStartup))>

KeBugCheckWithTf at ntoskrnl\ke\i386\exp.c:1327
A problem has been detected and ReactOS has been shut down to prevent damage to
your computer.

The problem seems to be caused by the following file: ntoskrnl.exe

Technical information:

• • • STOP: 0x0000001E (0x80000003,0x8006a887,0x800ae53c,0x80014bbf)

• • • ntoskrnl.exe - Address 0x8006a887 base at 0x80000000, DateStamp 0x0