Crash in cfgrelayex, Analyzed 4 dumps, total processed 65, rate equals 6.15%

Top 1: Version = 2.7224.1000.620, Total count = 4

dump count = 1

ChildEBP RetAddr  
0371fb58 7afa345d ntdll!RtlInitUnicodeString+0x1b
0371fba0 7afa3c0f CfgRelayEx!CChannelImpl::Run+0x3d
0371fba8 7afbffcb CfgRelayEx!CChannelImpl::ThreadImpl+0xf
0371fbe4 75336739 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0371fbf4 773e8fd2 kernel32!BaseThreadInitThunk+0x19
0371fc4c 773e8f9d ntdll!__RtlUserThreadStart+0x2b
0371fc5c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0439e058 76e479fc gdi32full!pcfLocateCFONT+0x67
0439e3d8 76e41bde gdi32full!GetFontRealizationInfo+0xdc
0439e988 76e429fc gdi32full!LoadFont+0x76
0439e9ac 76e434f3 gdi32full!FindOrCreateFaceCache+0x98
0439eab0 76e4adf4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0439ee58 76e491f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
0439f2c4 76e482ef gdi32full!ScriptStringAnalyse+0xa16
0439f46c 76e47b40 gdi32full!LpkCharsetDraw+0x60f
0439f498 75fad37d gdi32full!LpkDrawTextEx+0x30
0439f4f4 75fad214 user32!DT_DrawStr+0x5f
0439f554 75facd4b user32!DT_GetLineBreak+0xa2
0439f624 75facb4e user32!DrawTextExWorker+0x1f9
0439f640 655ce6ca user32!DrawTextExW+0x1e
0439f6a4 655cdd34 uxtheme!CTextDraw::GetTextExtent+0xa4
0439f6ec 655c43c9 uxtheme!GetThemeTextExtent+0x74
0439f740 655d0f87 uxtheme!_GetNcCaptionTextSize+0x61
0439f830 655d293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0439f8dc 655d29ef uxtheme!_WindowPosChangedWorker+0x7c
0439f8e8 655cf545 uxtheme!OnOwpPostWindowPosChanged+0x1f
0439f938 75fb7ff3 uxtheme!ThemePostWndProc+0x355
0439fa24 75fb7bca user32!UserCallWinProcCheckWow+0x363
0439fa88 75fbfc37 user32!DispatchClientMessage+0xea
0439fac8 77ce54ed user32!__fnINLPWINDOWPOS+0x37
0439fb18 77c4124c ntdll!KiUserCallbackDispatcher+0x4d
0439fb1c 655ed44f win32u!NtUserSetWindowPos+0xc
0439fb48 655d00ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0439fba4 75fb7f9f uxtheme!ThemePreWndProc+0x43f
0439fc90 75fb6901 user32!UserCallWinProcCheckWow+0x30f
0439fd0c 75fb6420 user32!DispatchMessageWorker+0x4d1
0439fd18 7951f5a1 user32!DispatchMessageW+0x10
0439fd3c 7951f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0439fd9c 7952196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0439fda8 7953ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0439fde4 77b4fcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0439fdf4 77cd80ce kernel32!BaseThreadInitThunk+0x19
0439fe50 77cd809e ntdll!__RtlUserThreadStart+0x2f
0439fe60 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0041fab0 7730e143 ntdll!RtlpLowFragHeapFree+0xc5
0041fac8 76ce14bd ntdll!RtlFreeHeap+0x105
0041fadc 53fc2d01 kernel32!HeapFree+0x14
0041faf0 53fa8ca4 CfgRelayEx!_free_base+0x1c
0041fafc 53fd4be1 CfgRelayEx!operator delete+0xb
0041fb24 53fc0f53 CfgRelayEx!ATL::`dynamic atexit destructor for '_AtlBaseModule''+0x1a7
0041fb50 53fc0e31 CfgRelayEx!<lambda_275893d493268fdec8709772e3fcec0e>::operator()+0x89
0041fb84 53fc0e7f CfgRelayEx!__crt_seh_guarded_call<int>::operator()<<lambda_995298e7d72eb4c2aab26c0585b3abe5>,<lambda_275893d493268fdec8709772e3fcec0e> &,<lambda_293819299cbf9a7022e18b56a874bb5c> >+0x27
0041fba4 53fc1158 CfgRelayEx!__acrt_lock_and_call<<lambda_275893d493268fdec8709772e3fcec0e> >+0x24
0041fbb8 53fc0714 CfgRelayEx!_execute_onexit_table+0x17
0041fbf0 53fc0895 CfgRelayEx!common_exit+0xa1
0041fc00 53fa92d7 CfgRelayEx!_cexit+0xb
0041fc34 53fa918f CfgRelayEx!dllmain_crt_process_detach+0x39
0041fc40 53fa93df CfgRelayEx!dllmain_crt_dispatch+0x4e
0041fc80 53fa947d CfgRelayEx!dllmain_dispatch+0xaf
0041fc94 773192c0 CfgRelayEx!_DllMainCRTStartup+0x1c
0041fcb4 7732f567 ntdll!LdrpCallInitRoutine+0x14
0041fd58 7732f409 ntdll!LdrShutdownProcess+0x1aa
0041fd6c 76ce7a7c ntdll!RtlExitUserProcess+0x74
0041fd80 0013275a kernel32!ExitProcessStub+0x12
0041fd8c 001326ef srvhost!exit_or_terminate_process+0x40
0041fdc4 00132895 srvhost!common_exit+0xee
0041fdd8 00127e90 srvhost!exit+0x11
0041fe18 76ce347d srvhost!__scrt_common_main_seh+0x179
0041fe24 77319852 kernel32!BaseThreadInitThunk+0xe
0041fe64 77319825 ntdll!__RtlUserThreadStart+0x70
0041fe7c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
042fe258 77180504 gdi32full!GetFontRealizationInfo+0x15
042fe808 77181066 gdi32full!LoadFont+0x76
042fe82c 771815f0 gdi32full!FindOrCreateFaceCache+0x98
042fe930 77188164 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
042fecd8 77186566 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
042ff144 7718565f gdi32full!ScriptStringAnalyse+0xa16
042ff2dc 77184eb0 gdi32full!LpkCharsetDraw+0x60f
042ff308 757aa6dd gdi32full!LpkDrawTextEx+0x30
042ff364 757aa574 user32!DT_DrawStr+0x5f
042ff3c4 757aa0ab user32!DT_GetLineBreak+0xa2
042ff494 757a9eae user32!DrawTextExWorker+0x1f9
042ff4b0 66fee8ba user32!DrawTextExW+0x1e
042ff514 66fedf54 uxtheme!CTextDraw::GetTextExtent+0xa4
042ff55c 66fe4429 uxtheme!GetThemeTextExtent+0x74
042ff5b0 66ff1167 uxtheme!_GetNcCaptionTextSize+0x61
042ff6a4 66ff2b1c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
042ff750 66ff2bcf uxtheme!_WindowPosChangedWorker+0x7c
042ff75c 66fef735 uxtheme!OnOwpPostWindowPosChanged+0x1f
042ff7ac 757b5203 uxtheme!ThemePostWndProc+0x355
042ff894 757b4dda user32!UserCallWinProcCheckWow+0x363
042ff8f8 757bc267 user32!DispatchClientMessage+0xea
042ff938 7750338d user32!__fnINLPWINDOWPOS+0x37
042ff988 76e8124c ntdll!KiUserCallbackDispatcher+0x4d
042ff98c 6700d7bf win32u!NtUserSetWindowPos+0xc
042ff9b8 66ff02cf uxtheme!OnOwpPreDwmCompositionChanged+0x4f
042ffa14 757b51af uxtheme!ThemePreWndProc+0x43f
042ffafc 757b350a user32!UserCallWinProcCheckWow+0x30f
042ffb70 757b32d0 user32!DispatchMessageWorker+0x22a
042ffb7c 7c01f5a1 user32!DispatchMessageW+0x10
042ffba0 7c01f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
042ffc00 7c02196f CfgRelayEx!CConfigCenterStub::Process+0xa7
042ffc0c 7c03ffcb CfgRelayEx!CThread::ThreadProc+0x1f
042ffc48 76bcf989 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
042ffc58 774f5de4 kernel32!BaseThreadInitThunk+0x19
042ffcb4 774f5db4 ntdll!__RtlUserThreadStart+0x2f
042ffcc4 00000000 ntdll!_RtlUserThreadStart+0x1b