For crashes like this, if the crash is reproducible, include NSZombies in the project environment variables. This will keep the freed objects alive (zombies), and when one of them is sent to the message, the caller and the message will be recorded on the emergency object.
Disable it when done, as it may lock the application memory due to objects not being freed up to track zombies.
source share