Hi Eliot, the crash.dmp shows what I put in the first mail, gdb shows some more info:
#0�� __GI___libc_free (mem=0x7f15fc1d15d0) at malloc.c:2965
#1�� 0x00000000004c745b in primitiveFFIFree () at /home/travis/build/OpenSmalltalk/opensmalltalk-vm/src/plugins/SqueakFFIPrims/X64SysVFFIPlugin.c:6352
#2�� 0x0000000000457f64 in primitiveExternalCall () at /home/travis/build/OpenSmalltalk/opensmalltalk-vm/spur64src/vm/gcc3x-cointerp.c:75751
#3�� 0x00000000004595cb in interpretMethodFromMachineCode () at /home/travis/build/OpenSmalltalk/opensmalltalk-vm/spur64src/vm/gcc3x-cointerp.c:18524
#4�� 0x000000000045bc69 in ceSendsupertonumArgs (selector=<optimized out>, superNormalBar=0, rcvr=<optimized out>, numArgs=0)
�� �� at /home/travis/build/OpenSmalltalk/opensmalltalk-vm/spur64src/vm/gcc3x-cointerp.c:16602
#5�� 0x00000000009000bb in ?? ()
#6�� 0x00007fffffffdbc0 in ?? ()
#7�� 0x000000000045ce56 in interpret () at /home/travis/build/OpenSmalltalk/opensmalltalk-vm/spur64src/vm/gcc3x-cointerp.c:2731
#8�� 0x00000000009ccf7f in ?? ()
#9�� 0x00000000045e39c8 in ?? ()
#10 0x00000000045e39c8 in ?? ()
...
As it is just loading, I think that it is trying to free some memory that was allocated before the image was saved. Looks like there is an external address that should have been niled but for some reason wasn't.