Crash in cfgrelayex, Analyzed 2 dumps, total processed 38, rate equals 5.26%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

043bf4d0 7749f4eb gdi32full!LpkDrawTextEx+0x203
043bf56c 7599c902 user32!DT_DrawStr+0x69
043bf678 71c90174 gdi32!IntersectClipRect+0x22
043bf6dc 71c9616a uxtheme!CTextDraw::GetTextExtent+0x109
043bf724 71c8796d uxtheme!GetThemeTextExtent+0x8a
043bf778 71c5686a uxtheme!_GetNcCaptionTextSize+0x61
043bf8f0 71c57bae uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
043bf9d4 71c5c2df uxtheme!_WindowPosChangedWorker+0x73
043bf9e0 71c59090 uxtheme!OnOwpPostWindowPosChanged+0x1f
043bfa48 774945c0 uxtheme!ThemePostWndProc+0x340
043bfb44 7749401a user32!UserCallWinProcCheckWow+0x4f0
043bfba8 774a13f7 user32!DispatchClientMessage+0xea
043bfbe8 776a919d user32!__fnINLPWINDOWPOS+0x37
043bfc38 76d012ac ntdll!KiUserCallbackDispatcher+0x4d
043bfc3c 71c85bef win32u!NtUserSetWindowPos+0xc
043bfc68 71c5a428 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
043bfd98 776a6bdc uxtheme!ThemePreWndProc+0x988
043bfe20 76d010dc ntdll!ZwCallbackReturn+0xc
043bfe6c 5336f5a1 win32u!NtUserGetMessage+0xc
043bfef0 5337196f CfgRelayEx!WTL::CMessageLoop::Run+0xc1
043bfefc 5338ffcb CfgRelayEx!CThread::ThreadProc+0x1f
043bff38 75ae7ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
043bff48 7769c10b kernel32!BaseThreadInitThunk+0x19
043bffa0 7769c08f ntdll!__RtlUserThreadStart+0x2b
043bffb0 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0357fba4 60d8345d ntdll!RtlInitUnicodeString+0x1b
0357fbec 60d83c0f CfgRelayEx!CChannelImpl::Run+0x3d
0357fbf4 60d9ffcb CfgRelayEx!CChannelImpl::ThreadImpl+0xf
0357fc30 7502343d CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0357fc3c 77399802 kernel32!BaseThreadInitThunk+0xe
0357fc7c 773997d5 ntdll!__RtlUserThreadStart+0x70
0357fc94 00000000 ntdll!_RtlUserThreadStart+0x1b