Crash in cfgrelayex, Analyzed 3 dumps, total processed 49, rate equals 6.12%

Top 1: Version = 2.7224.1000.620, Total count = 3

dump count = 1

ChildEBP RetAddr  
0468e018 77b0a2ea ntdll!RtlWow64EnableFsRedirectionEx+0x1b
0468e060 77b08514 ntdll!LdrpPreprocessDllName+0x1a
0468e314 77b083c8 ntdll!LdrGetDllHandleEx+0x134
0468e330 77597bae ntdll!LdrGetDllHandle+0x18
0468e358 773cac7e KERNELBASE!GetModuleHandleW+0x2e
0468e360 773ca4a5 gdi32!wil_details_GetNtDllModuleHandle+0x14
0468e378 773c9cd5 gdi32!wil_details_RtlQueryFeatureConfiguration+0x20
0468e3b0 773ca2f8 gdi32!wil_RtlStagingConfig_QueryFeatureState+0x3b
0468e3f8 773ca1aa gdi32!wil_details_GetCurrentFeatureEnabledState+0x41
0468e430 773ca401 gdi32!wil_details_FeatureStateCache_ReevaluateCachedFeatureEnabledState+0x4a
0468e454 773c9c90 gdi32!wil_details_IsEnabledFallback+0x28
0468e468 773c9c77 gdi32!Feature_Servicing_CFONTPrintLeak__private_IsEnabledFallback+0x11
0468e480 773c3943 gdi32!Feature_Servicing_CFONTPrintLeak__private_IsEnabledDeviceUsage+0x21
0468e4bc 773c3802 gdi32!InternalDeleteObject+0x113
0468e4cc 778b17ca gdi32!DeleteObject+0x32
0468e5c8 778b2028 gdi32full!CacheFontLinkingData+0x367
0468e5e8 778b23bd gdi32full!IsFontRegLinked+0x28
0468eb90 778a802b gdi32full!LoadFont+0x29e
0468ebb4 778a8182 gdi32full!FindOrCreateFaceCache+0xc7
0468ecc0 77846ae5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
0468f068 778474db gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
0468f184 77848873 gdi32full!ScriptStringAnalyse+0x3eb
0468f308 77846733 gdi32full!LpkCharsetDraw+0xa93
0468f348 7719f44b gdi32full!LpkDrawTextEx+0x203
0468f3ac 7719f351 user32!DT_DrawStr+0x69
0468f404 7719ef4e user32!DT_GetLineBreak+0xf8
0468f4d4 7720d03e user32!DrawTextExWorker+0x1c4
0468f4f0 694bfb54 user32!DrawTextExW+0x1e
0468f554 694c5b3a uxtheme!CTextDraw::GetTextExtent+0x109
0468f59c 694b733d uxtheme!GetThemeTextExtent+0x8a
0468f5f0 6948686a uxtheme!_GetNcCaptionTextSize+0x61
0468f76c 69487bae uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
0468f850 6948c2ef uxtheme!_WindowPosChangedWorker+0x73
0468f85c 694890a6 uxtheme!OnOwpPostWindowPosChanged+0x1f
0468f8c0 77194510 uxtheme!ThemePostWndProc+0x356
0468f9bc 77193f6a user32!UserCallWinProcCheckWow+0x4f0
0468fa20 771a1357 user32!DispatchClientMessage+0xea
0468fa60 77b3919d user32!__fnINLPWINDOWPOS+0x37
0468fab0 77a212ac ntdll!KiUserCallbackDispatcher+0x4d
0468fab4 694b55bf win32u!NtUserSetWindowPos+0xc
0468fae0 6948a438 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0468fb64 771944b8 uxtheme!ThemePreWndProc+0x988
0468fc60 77192da5 user32!UserCallWinProcCheckWow+0x498
0468fcdc 771928f0 user32!DispatchMessageWorker+0x4a5
0468fce8 56f5f5a1 user32!DispatchMessageW+0x10
0468fd0c 56f5f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0468fd6c 56f6196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0468fd78 56f7ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0468fdb4 76d37ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0468fdc4 77b2c10b kernel32!BaseThreadInitThunk+0x19
0468fe1c 77b2c08f ntdll!__RtlUserThreadStart+0x2b
0468fe2c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
046dfc48 736cab96 KERNELBASE!RaiseException+0x58
046dfc8c 736b96a3 CfgRelayEx!_CxxThrowException+0x66
046dfca8 046dfcb8 CfgRelayEx!__scrt_throw_std_bad_alloc+0x1c
WARNING: Frame IP not in any known module. Following frames may be wrong.
046dfcac 736ac04c 0x46dfcb8
046dfcb8 736a7417 CfgRelayEx!std::_Default_allocate_traits::_Allocate+0xc
046dfcd0 736a73c5 CfgRelayEx!std::_Allocate_manually_vector_aligned<std::_Default_allocate_traits>+0x27
046dfcdc 736acfd9 CfgRelayEx!std::_Allocate<8,std::_Default_allocate_traits,0>+0x15
046dfcec 736a8858 CfgRelayEx!std::allocator<char>::allocate+0x19
046dfd10 736ad0ed CfgRelayEx!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::_Reallocate_for<<lambda_9366063389c5f42a00a5088cf24e69de>,char const *>+0x58
046dfd34 736a98aa CfgRelayEx!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::assign+0x7d
046dfd4c 736aa3f3 CfgRelayEx!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::operator=+0x5a
046dfd5c 736ab5a6 CfgRelayEx!CClient::CacheCfg+0x13
046dfde4 736ab472 CfgRelayEx!CClientMgr::OnSlowCfgRefresh+0x126
046dfdfc 736b3390 CfgRelayEx!CClientMgr::OnReceiveMessage+0x42
046dfe58 736b320f CfgRelayEx!CChannelImpl::ReceiveThreadImp+0x170
046dfe60 736cffcb CfgRelayEx!CChannelImpl::ReceiveThread+0xf
046dfe9c 74c7343d CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
046dfea8 76fd9832 kernel32!BaseThreadInitThunk+0xe
046dfee8 76fd9805 ntdll!__RtlUserThreadStart+0x70
046dff00 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0541e358 76481bde gdi32full!GetFontRealizationInfo+0x15
0541e908 764829fc gdi32full!LoadFont+0x76
0541e92c 764834f3 gdi32full!FindOrCreateFaceCache+0x98
0541ea30 7648adf4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0541edd8 764891f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
0541f244 764882ef gdi32full!ScriptStringAnalyse+0xa16
0541f3ec 76487b40 gdi32full!LpkCharsetDraw+0x60f
0541f418 7654d37d gdi32full!LpkDrawTextEx+0x30
0541f474 7654d214 user32!DT_DrawStr+0x5f
0541f4d4 7654cd4b user32!DT_GetLineBreak+0xa2
0541f5a4 7654cb4e user32!DrawTextExWorker+0x1f9
0541f5c0 734ce6ca user32!DrawTextExW+0x1e
0541f624 734cdd34 uxtheme!CTextDraw::GetTextExtent+0xa4
0541f66c 734c43c9 uxtheme!GetThemeTextExtent+0x74
0541f6c0 734d0f87 uxtheme!_GetNcCaptionTextSize+0x61
0541f7b0 734d293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0541f85c 734d29ef uxtheme!_WindowPosChangedWorker+0x7c
0541f868 734cf545 uxtheme!OnOwpPostWindowPosChanged+0x1f
0541f8b8 76557ff3 uxtheme!ThemePostWndProc+0x355
0541f9a4 76557bca user32!UserCallWinProcCheckWow+0x363
0541fa08 7655fc37 user32!DispatchClientMessage+0xea
0541fa48 77e654ed user32!__fnINLPWINDOWPOS+0x37
0541fa98 7753124c ntdll!KiUserCallbackDispatcher+0x4d
0541fa9c 734ed44f win32u!NtUserSetWindowPos+0xc
0541fac8 734d00ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0541fb24 76557f9f uxtheme!ThemePreWndProc+0x43f
0541fc10 76556901 user32!UserCallWinProcCheckWow+0x30f
0541fc8c 76556420 user32!DispatchMessageWorker+0x4d1
0541fc98 5a53f5a1 user32!DispatchMessageW+0x10
0541fcbc 5a53f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0541fd1c 5a54196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0541fd28 5a55ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0541fd64 778afcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0541fd74 77e580ce kernel32!BaseThreadInitThunk+0x19
0541fdd0 77e5809e ntdll!__RtlUserThreadStart+0x2f
0541fde0 00000000 ntdll!_RtlUserThreadStart+0x1b