Crash in cfgrelayex, Analyzed 2 dumps, total processed 73, rate equals 2.74%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
03dfe034 77a6e980 ntdll!RtlAnsiStringToUnicodeString+0x1b
03dfe060 77a6ea65 ntdll!LdrpAppendAnsiStringToFilenameBuffer+0x66
03dfe2e0 77a6f909 ntdll!LdrpLoadForwardedDll+0x75
03dfe37c 77a6f9f5 ntdll!LdrpGetDelayloadExportDll+0x80
03dfe62c 77a6cbdb ntdll!LdrpHandleProtectedDelayload+0x95
03dfe684 7683f6c8 ntdll!LdrResolveDelayLoadedAPI+0x17b
03dfe6a4 76840ecd gdi32full!__delayLoadHelper2+0x28
03dfe7d0 76830f45 gdi32full!_tailMerge_textshaping_dll+0xd
03dfed78 76831816 gdi32full!LoadFont+0x307
03dfed9c 76832039 gdi32full!FindOrCreateFaceCache+0x98
03dfeea0 7683770b gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
03dff304 768368ef gdi32full!ScriptStringAnalyse+0x92b
03dff49c 76836140 gdi32full!LpkCharsetDraw+0x60f
03dff4c8 75a8adfd gdi32full!LpkDrawTextEx+0x30
03dff524 75a8ac94 user32!DT_DrawStr+0x5f
03dff584 75a8a7cb user32!DT_GetLineBreak+0xa2
03dff654 75a8a5ce user32!DrawTextExWorker+0x1f9
03dff670 6c40e6ea user32!DrawTextExW+0x1e
03dff6d4 6c40dd84 uxtheme!CTextDraw::GetTextExtent+0xa4
03dff71c 6c404349 uxtheme!GetThemeTextExtent+0x74
03dff770 6c410fa7 uxtheme!_GetNcCaptionTextSize+0x61
03dff864 6c41295c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
03dff910 6c412a0f uxtheme!_WindowPosChangedWorker+0x7c
03dff91c 6c40f565 uxtheme!OnOwpPostWindowPosChanged+0x1f
03dff96c 75a95ea3 uxtheme!ThemePostWndProc+0x355
03dffa54 75a95a7a user32!UserCallWinProcCheckWow+0x363
03dffab8 75a9ce97 user32!DispatchClientMessage+0xea
03dffaf8 77a94e7d user32!__fnINLPWINDOWPOS+0x37
03dffb48 6c42d4af ntdll!KiUserCallbackDispatcher+0x4d
03dffb74 6c41010f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03dffbd0 75a95e4f uxtheme!ThemePreWndProc+0x43f
03dffcb8 75a93bea user32!UserCallWinProcCheckWow+0x30f
03dffd2c 75a939b0 user32!DispatchMessageWorker+0x22a
03dffd38 50eef5a1 user32!DispatchMessageW+0x10
03dffd5c 50eef2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03dffdbc 50ef196f CfgRelayEx!CConfigCenterStub::Process+0xa7
03dffdc8 50f0ffcb CfgRelayEx!CThread::ThreadProc+0x1f
03dffe04 7646fa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03dffe14 77a87a7e kernel32!BaseThreadInitThunk+0x19
03dffe70 77a87a4e ntdll!__RtlUserThreadStart+0x2f
03dffe80 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0493f6c8 7981018c CfgRelayEx!CChannelImpl::CChannelImpl+0x55
0493f6ec 79809d2a CfgRelayEx!CChannel::CChannel+0x5c
0493f71c 79807566 CfgRelayEx!<lambda_058987b5d1a819559a08d2177fb6eb54>::operator()+0x4a
0493f724 79808da5 CfgRelayEx!std::_Invoker_functor::_Call<<lambda_058987b5d1a819559a08d2177fb6eb54> >+0x16
0493f730 798085de CfgRelayEx!std::invoke<<lambda_058987b5d1a819559a08d2177fb6eb54> >+0x15
0493f73c 798075c0 CfgRelayEx!std::_Invoke_stored_explicit<<lambda_058987b5d1a819559a08d2177fb6eb54> &&,std::exception_ptr &,0>+0x1e
0493f788 77c6d12f CfgRelayEx!std::_Callback_once<std::tuple<<lambda_058987b5d1a819559a08d2177fb6eb54> &&,std::exception_ptr &>,std::integer_sequence<unsigned int,0>,1>+0x50
0493f7ac 76ca8f87 ntdll!RtlRunOnceExecuteOnce+0x4f
0493f7c4 79815fe3 KERNELBASE!InitOnceExecuteOnce+0x17
0493f7e0 798156e0 CfgRelayEx!__crtInitOnceExecuteOnce+0x28
0493f7f8 79808b4e CfgRelayEx!std::_Execute_once+0x13
0493f834 7980aea7 CfgRelayEx!std::call_once<<lambda_058987b5d1a819559a08d2177fb6eb54> >+0x6e
0493f848 7980f28a CfgRelayEx!CSingletonT<CChannel>::GetInstance+0x17
0493f8a8 7981196f CfgRelayEx!CConfigCenterStub::Process+0x3a
0493f8b4 7982ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0493f8f0 76abf989 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0493f900 77c87084 kernel32!BaseThreadInitThunk+0x19
0493f95c 77c87054 ntdll!__RtlUserThreadStart+0x2f
0493f96c 00000000 ntdll!_RtlUserThreadStart+0x1b