The Gimli Glider

The Boeing 767 that ran out of fuel at 41,000 feet

By VastBlue Editorial · 2026-03-26 · 20 min read

Series: What Really Happened · Episode 9

The Gimli Glider

Silence at 41,000 Feet

At approximately 20:24 Central Daylight Time on 23 July 1983, the cockpit of Air Canada Flight 143 went quiet in a way that no airline pilot ever expects to experience. The aircraft — a Boeing 767-233, registration C-GAUN — was cruising at 41,000 feet over Red Lake, Ontario, en route from Montreal to Edmonton with a stop in Ottawa. Sixty-one passengers and eight crew were on board. The left engine had flamed out four minutes earlier, and Captain Robert Pearson and First Officer Maurice Quintal were still processing that event when the right engine followed it into silence. The flight management computers went dark. The glass cockpit — the 767 was one of the first commercial aircraft to use electronic flight displays instead of analogue instruments — flickered and died. The hydraulic pumps, driven by the engines, stopped turning. The cabin lights went out.

What remained was the Ram Air Turbine — a small propeller that drops from the belly of the aircraft into the slipstream to generate a trickle of hydraulic and electrical power — and the standby instruments powered by a backup battery. Pearson and Quintal had partial control of the flight surfaces. They had an airspeed indicator, an altimeter, and an artificial horizon. They had no thrust, no primary electrical power, and no prospect of restarting the engines. The aircraft had run completely out of fuel at the highest cruising altitude a commercial widebody had ever achieved without power. Boeing had never tested this scenario in its simulators. No airline had trained for it. The emergency checklists did not cover total fuel exhaustion at cruise altitude because the engineers who designed the 767 and the regulators who certified it considered the scenario effectively impossible.

41,000 ft Altitude when both engines flamed out — Boeing had never tested a total fuel exhaustion scenario at cruise altitude in its simulators. The emergency checklists did not cover it.

The aircraft that would become known as the Gimli Glider — named for the decommissioned Royal Canadian Air Force base where it would eventually land — was now the heaviest glider in history. A Boeing 767 without engines has a glide ratio of approximately 12:1, meaning it travels roughly twelve miles forward for every mile of altitude lost. From 41,000 feet, Pearson had approximately 100 nautical miles of range. Winnipeg, the nearest major airport, was 120 nautical miles away. It was too far. Every airfield in range was too small, too short, or had no instrument approach. Except one.

The Conversion That Nobody Checked

The chain of events that emptied Flight 143's fuel tanks began months before the aircraft departed Montreal. In 1982, Air Canada was in the process of transitioning its fleet to metric measurement, as mandated by Canada's adoption of the International System of Units. The airline's older aircraft — the DC-9s, the 727s, the 747s — all measured fuel in pounds. The new Boeing 767, the first of its type delivered to Air Canada, measured fuel in kilograms. This was not merely a labelling change. It affected every fuel calculation, every dispatch document, every weight-and-balance computation, and every refuelling order. The transition required new procedures, new documentation, retraining of ground crews and pilots, and careful coordination between departments that had historically dealt in imperial units.

The specific aircraft involved, C-GAUN, had a recurring fault with its fuel quantity information system, or FQIS. The FQIS is the electronic system that measures fuel load using capacitance probes in the fuel tanks and displays the total on the cockpit instruments. On C-GAUN, one of the two FQIS processor channels — known as channel two — had been intermittently failing. When channel two failed, the fuel gauges went blank. The aircraft could still fly safely provided the crew had verified the fuel load manually before departure and used the calculated fuel burn to track remaining fuel during flight. Air Canada's Minimum Equipment List — the document specifying which systems can be inoperative and the aircraft still be dispatched — permitted dispatch with the FQIS inoperative under certain conditions, including that the fuel load had been confirmed by an independent method.

On the morning of 23 July, maintenance technician Rodrigue Bourbeau worked on the FQIS before the aircraft's first flight of the day. He discovered that pulling the circuit breaker for channel two — effectively disabling the faulty processor — caused the fuel gauges to operate on channel one alone. The gauges worked. He made a note of this and left the circuit breaker pulled, with tape over it and a notation in the technical log. The aircraft departed Montreal for Edmonton, via Ottawa, with working fuel gauges. When it arrived in Edmonton, the next maintenance crew — unaware of Bourbeau's workaround, or misunderstanding it — pushed the circuit breaker back in. Channel two came alive, conflicted with channel one, and the fuel gauges went blank again.

The aircraft was dispatched from Edmonton to Montreal with blank fuel gauges. It landed safely, the fuel load having been calculated manually. Now, on the afternoon of 23 July, it was preparing for the return flight — Montreal to Ottawa to Edmonton. The FQIS was still inoperative. The crew needed to confirm the fuel load by manual measurement. This meant physically dipping the tanks using a calibrated dipstick called a drip stick, reading the fuel level in the tanks, and converting that measurement into a total fuel weight. The measurement was in centimetres. The conversion required knowing the specific gravity of the fuel and the tank geometry. And it required knowing whether the final answer was to be expressed in kilograms or pounds.

This is where the error occurred. The crew — Captain Pearson, First Officer Quintal, and the mechanic performing the drip-stick measurement — needed to calculate the fuel load in kilograms. The 767 required 22,300 kilograms of fuel for the flight from Montreal to Edmonton. The drip-stick readings gave them a volume measurement that needed to be converted to mass. The conversion factor they used was 1.77 — the specific gravity of jet fuel expressed in pounds per litre. They should have used 0.803 — the specific gravity expressed in kilograms per litre. Nobody on the aircraft, and nobody in the dispatch chain, caught the error. The crew, the dispatcher, and the fueller all used the same wrong conversion factor. They believed they had loaded 22,300 kilograms of fuel. They had actually loaded 22,300 pounds — approximately 10,100 kilograms, less than half what was required.

22,300 lbs Actual fuel on board (instead of 22,300 kg) — The crew used a pounds-per-litre conversion factor (1.77) instead of kilograms-per-litre (0.803). The result: less than half the required fuel.

They believed they had loaded 22,300 kilograms of fuel. They had actually loaded 22,300 pounds — less than half what was required for the flight.

Transportation Safety Board of Canada, Final Report

A Chain with No Strong Link

The conversion error was not a single mistake by a single individual. It was the product of a system in transition, where old procedures no longer applied and new ones had not been fully implemented. Every person who touched the fuel calculation on 23 July 1983 was competent, experienced, and acting in good faith. Every one of them made the same error, because the system they were operating within made the error almost inevitable.

Air Canada had begun receiving its first 767s in early 1983. The airline had issued guidance on metric fuel calculations, but the guidance was incomplete. The conversion tables available to crews showed the pounds-per-litre factor prominently — it was the one everyone had used for years on every other aircraft in the fleet. The kilograms-per-litre factor was less familiar, less intuitive, and less prominently displayed. Crews had not been systematically trained on the difference. There was no standardised checklist step that required the crew to verify which unit system was being used. There was no independent cross-check built into the fuelling process that would catch a unit conversion error.

The maintenance chain had its own failures. The FQIS on C-GAUN had been malfunctioning for weeks. Parts had been ordered but had not arrived. The aircraft had been dispatched repeatedly with blank fuel gauges — each dispatch legal under the Minimum Equipment List, each dispatch adding another layer of normalised deviance. The system was designed with the assumption that FQIS failures were rare, temporary events. When the failure became chronic, the safeguards designed for temporary failures became inadequate. Manual fuel verification — intended as an emergency backup — became the primary method, performed by crews who had rarely practised it and using conversion factors they had never needed to distinguish.

The dispatch process compounded the problem. The dispatcher calculated the required fuel load and issued it to the crew, but the crew's confirmation depended on the same manual process already compromised by the conversion error. The fuelling company's records showed the amount uploaded in litres — a correct number — but nobody converted it into kilograms to cross-check against the flight plan. Every link in the chain relied on the link before it, and every link had used the same wrong factor.

The aircraft departed Montreal with blank fuel gauges and less than half the fuel it needed. It stopped in Ottawa, where additional fuel was loaded using the same wrong conversion factor. Flight 143 departed Ottawa for Edmonton at approximately 19:00, with fuel sufficient to reach roughly the middle of Manitoba.

The Glide

The first indication of trouble came at approximately 20:10, when the cockpit fuel pressure warning light for the left engine illuminated. Pearson and Quintal consulted the checklist for a fuel pressure anomaly and considered the possibility of a faulty fuel pump. A fuel pump failure was a manageable situation. Running out of fuel was not under consideration — the crew believed they had ample reserves. Four minutes later, the left engine flamed out. The crew now suspected a fuel feed problem more serious than a pump failure, but the possibility of fuel exhaustion still did not register. The flight plan said they had enough fuel. They had confirmed it manually. The arithmetic was clear in their minds.

They began preparing for a single-engine diversion to Winnipeg, the nearest suitable airport, approximately 120 nautical miles ahead. Then, at 20:24, the right engine flamed out. The cockpit went dark. The familiar hum of the 767's systems died. An alarm that neither pilot had ever heard in an aircraft — the sound of the Ram Air Turbine deploying — filled the silence. In the cabin, sixty-one passengers felt the aircraft shudder and the lights go out. Some heard the sudden quiet and knew immediately that something fundamental had changed.

Pearson was a glider pilot. This fact, unremarkable on his résumé, was about to become the most important detail in the lives of sixty-nine people. He knew instinctively what the 767 had become: a glider, and gliders are flown by managing energy. The aircraft had one energy source remaining — its altitude — and that energy was non-renewable. Every decision from this point forward would trade altitude for something: distance, speed, time, or manoeuvrability. There would be no second chances and no go-arounds.

Pearson was a glider pilot. He knew instinctively what the 767 had become: a glider, and gliders are flown by managing energy. The aircraft had one energy source remaining — its altitude — and it was non-renewable.

After the Transportation Safety Board investigation

The first problem was airspeed. Without engine power, the 767's primary airspeed indicator was unreliable. Boeing had never published a best-glide speed for the 767 — the speed at which the aircraft would cover the maximum distance for the minimum altitude lost — because Boeing had not anticipated total fuel exhaustion at cruise altitude. Pearson experimented, adjusting the pitch to find a speed that felt right, drawing on his glider training to sense the aircraft's performance through the controls. He settled on approximately 220 knots.

The second problem was navigation. With the flight management system offline, Quintal was working from paper charts and mental arithmetic. Winnipeg was too far — the crew calculated they could not reach it. Quintal, who had served in the Royal Canadian Air Force, remembered Gimli — a decommissioned RCAF base on the western shore of Lake Winnipeg, roughly halfway between their present position and Winnipeg. He knew it had two long, paved runways. He did not know — could not have known, working from outdated charts in a dark cockpit — that the Gimli airfield had been partially converted into a motorsport facility. One of the runways was being used that evening for drag racing. Families were camped along its edges. Children were riding bicycles on the tarmac.

12:1 Approximate glide ratio of the Boeing 767 — From 41,000 feet, this gave Pearson roughly 100 nautical miles of range — not enough to reach Winnipeg, but enough to reach Gimli.

Pearson turned toward Gimli and began a descent that would cover nearly 100 nautical miles in approximately seventeen minutes. The 767 descended at roughly 2,500 feet per minute — a rate that would have been alarming in powered flight but was the physics of a 132-tonne glider trading altitude for distance. In the cabin, flight attendants prepared for an emergency landing. The passengers were remarkably calm. Some later said they did not fully understand the severity of the situation. The cabin was dark, the engines were silent, and the aircraft was descending, but there was no fire, no structural damage, no violent manoeuvring. It was, by the accounts of those on board, eerily peaceful.

As the aircraft descended through 14,500 feet, a new problem emerged. Pearson was too high. Gimli was visible ahead, and the 767 had more altitude than it needed. In a powered aircraft, this is trivial — reduce thrust, extend speed brakes, fly a longer pattern. In a glider, excess altitude is almost as dangerous as insufficient altitude, because the only way to lose it is to steepen the descent or extend the flight path, both of which reduce the pilot's options if something goes wrong. Pearson could not go around. He could not add power. He had one approach, and it had to be right.

Pearson executed a manoeuvre that no airline pilot had ever performed in a commercial widebody aircraft and that few would have thought to attempt. He performed a forward slip — a technique from glider flying in which the pilot crosses the controls, applying opposite rudder and aileron to present the fuselage sideways to the airflow, dramatically increasing drag and steepening the descent without increasing airspeed. It is a standard technique in light aircraft and gliders. It had never been performed in a Boeing 767. The aircraft shuddered and groaned. The passengers felt the airframe twist. But it worked. The 767 lost altitude rapidly while maintaining a controllable approach speed.

At approximately 20:38, the Boeing 767 crossed the threshold of Runway 32L at Gimli. The landing gear had been lowered using the emergency gravity-drop system — the hydraulics that normally extended the gear were inoperative — but the nose gear had not fully locked into position. As the aircraft touched down at approximately 180 knots, the nose gear collapsed. The aircraft's nose struck the runway surface, and the 767 slid on its nose and main gear for approximately 3,000 feet before coming to a stop. The right main-gear tyres had blown on touchdown. Small fires broke out around the nose area but were quickly extinguished.

The aircraft stopped approximately 100 feet from the spectators and families gathered for the drag races on the adjacent section of runway. The evacuation was swift. Some passengers exited via the rear slides and suffered minor injuries from the steep angle caused by the collapsed nose gear. Two people required hospital treatment for minor injuries. Nobody died. Nobody suffered serious injury. Captain Bob Pearson had glided a 132-tonne commercial aircraft 100 nautical miles without engine power and landed it on a disused military runway that was being used for car racing, at dusk, with a collapsed nose gear, and every person on board walked away.

The aircraft stopped approximately 100 feet from the spectators gathered for the drag races. Every person on board walked away.

After eyewitness accounts, Gimli, Manitoba

What the Investigation Found

The Transportation Safety Board of Canada — the predecessor organisation would handle the initial investigation, with the TSB formally established in 1990 — conducted an exhaustive inquiry into the incident. The investigation confirmed the metric-imperial conversion error as the proximate cause but went considerably deeper, identifying a web of systemic factors that had made the error possible and had eliminated every safeguard that should have caught it.

The investigation also examined the organisational context. Air Canada was under severe financial pressure in 1983, operating under government ownership with a mandate to reduce costs. The FQIS part that would have fixed C-GAUN's fuel gauge problem had been on order but had not been prioritised. The human factors analysis confirmed that the conversion factor 1.77 was so deeply ingrained in institutional memory — used for every other aircraft in the fleet for decades — that the new factor of 0.803 had been communicated but never absorbed. Under the routine pressure of a normal departure, every person in the chain reached for the number they knew.

Every individual involved in the fuel calculation made the same conversion error independently. It was not a case of one mistake propagating. It was a systemic ambiguity that affected everyone equally.

After the Canadian Aviation Safety Board Report, 1985

What Changed

The Gimli Glider incident produced immediate and lasting changes in aviation operations. Air Canada overhauled its fuel verification procedures within weeks. A mandatory cross-check was introduced requiring the independently calculated fuel load to be compared against the fuel uplift records from the fuelling company. The conversion factors for metric and imperial measurement were standardised on a laminated reference card carried on every 767. Training on manual fuel calculation was made mandatory for all flight crew and maintenance personnel operating metric aircraft.

The Minimum Equipment List provisions for FQIS deferral were tightened, both by Air Canada and subsequently by Boeing and other operators worldwide. Blank fuel gauges were no longer considered acceptable for routine dispatch. The assumption that manual fuel verification was an adequate substitute for functioning instrumentation was challenged, and the procedures surrounding manual verification were made significantly more rigorous.

Boeing made changes to the 767's fuel system and cockpit displays. Subsequent models included improved FQIS reliability and clearer unit indication. More broadly, the incident demonstrated that unit conversion errors — a seemingly trivial category of mistake — can have catastrophic consequences when they propagate through a system without independent verification. It showed that transitional periods are moments of acute vulnerability, and it illustrated the danger of normalised deviance: the repeated acceptance of a known deficiency until the deficiency was no longer perceived as abnormal.

The Pilot Who Could Glide

The systemic failures that emptied Flight 143's fuel tanks are the lessons of the Gimli Glider. But the reason the Gimli Glider is remembered with admiration rather than mourning is the performance of its crew. Captain Bob Pearson and First Officer Maurice Quintal faced a situation that no training had prepared them for, that no manual covered, and that no simulator had ever replicated. They had seventeen minutes to make every decision correctly, with no power, limited instruments, and no margin for error.

Pearson's glider experience gave him a framework that no airline training provided — an instinctive understanding of energy management, of the relationship between altitude and distance, of how an unpowered aircraft behaves. Quintal's military knowledge of the Gimli airfield provided the destination. The collaboration between the two — Pearson flying, Quintal navigating from paper charts in a dark cockpit — was a textbook example of crew resource management before the concept had been widely adopted.

The aircraft, C-GAUN, was repaired and returned to service. It flew for Air Canada for another twenty-five years, finally retiring in January 2008 with over 60,000 additional flight hours. Pearson and Quintal were initially subjected to disciplinary proceedings by Air Canada — a response that drew sharp criticism from the aviation community. Both were subsequently cleared and received commendations.

The Gimli Glider is, at its core, two stories. The first is a story about systems: how a unit conversion error propagated through an organisation in transition, how normalised deviance turned a temporary maintenance deferral into a chronic hazard, how every safeguard in the chain relied on the same flawed assumption, and how a system designed for redundancy contained no true independence. The second is a story about skill: how a pilot's weekend hobby became the critical variable in an emergency that the entire aviation industry had declared impossible, how crew coordination and improvisation substituted for procedures that did not exist, and how sixty-nine people walked away from a situation that, by every engineering analysis, should have killed them.

The Gimli Glider is two stories. One is about how systems fail when every safeguard relies on the same flawed assumption. The other is about how sixty-nine people walked away from a situation that should have killed them, because a pilot knew how to fly without engines.

After the investigation record

The distance between those two stories — between the system that failed and the individuals who saved it — is the space where most industrial safety work happens. The Gimli Glider is a reminder that systems must be designed not to need heroes. It is also a reminder that sometimes, despite every effort, they do.

Sources

  1. Canadian Aviation Safety Board — Final Report on Air Canada Boeing 767-233, C-GAUN (1985) — https://www.tsb.gc.ca/eng/rapports-reports/aviation/1983/a83h0003/a83h0003.html
  2. Williams, W. — The Gimli Glider: The Story of Flight 143 (2003) — https://www.amazon.com/Freefall-Gimli-Glider-William-Chicken/dp/155028758X
  3. Nelson, W.H. — The Gimli Glider: A Case Study in Metric Conversion (1997) — https://www.flightglobal.com/gimli-glider/21074.article
  4. Reason, J. — Human Error (1990) — https://www.cambridge.org/core/books/human-error/5B04A41B2B8C2D7C4A6D0A14B72E2E1E
  5. Transportation Safety Board of Canada — Aviation Safety Study on Fuel Quantity Indicators — https://www.tsb.gc.ca/eng/rapports-reports/aviation/
  6. New York Times — Air Canada Jet Lands Safely After Running Out of Fuel (1983) — https://www.nytimes.com/1983/07/24/us/air-canada-jet-lands-safely-after-running-out-of-fuel.html
  7. Dekker, S. — The Field Guide to Understanding Human Error (2006) — https://www.routledge.com/The-Field-Guide-to-Understanding-Human-Error/Dekker/p/book/9781472439055