Crash in cfgrelayex, Analyzed 5 dumps, total processed 87, rate equals 5.75%

Top 1: Version = 2.7224.1000.620, Total count = 5

dump count = 1

ChildEBP RetAddr  
0397e118 76c106c6 gdi32full!GetFontRealizationInfo+0x15
0397e6c8 76c11226 gdi32full!LoadFont+0x76
0397e6ec 76c117b0 gdi32full!FindOrCreateFaceCache+0x98
0397e7f0 76c18e54 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0397eb98 76c17256 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
0397f004 76c1634f gdi32full!ScriptStringAnalyse+0xa16
0397f1a4 76c15ba0 gdi32full!LpkCharsetDraw+0x60f
0397f1d0 77149fed gdi32full!LpkDrawTextEx+0x30
0397f22c 77149e84 user32!DT_DrawStr+0x5f
0397f28c 771499bb user32!DT_GetLineBreak+0xa2
0397f35c 771497be user32!DrawTextExWorker+0x1f9
0397f378 70f7e8ba user32!DrawTextExW+0x1e
0397f3dc 70f7df54 uxtheme!CTextDraw::GetTextExtent+0xa4
0397f424 70f74429 uxtheme!GetThemeTextExtent+0x74
0397f478 70f81167 uxtheme!_GetNcCaptionTextSize+0x61
0397f56c 70f82b1c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0397f618 70f82bcf uxtheme!_WindowPosChangedWorker+0x7c
0397f624 70f7f735 uxtheme!OnOwpPostWindowPosChanged+0x1f
0397f674 77154733 uxtheme!ThemePostWndProc+0x355
0397f75c 7715430a user32!UserCallWinProcCheckWow+0x363
0397f7c0 7715b937 user32!DispatchClientMessage+0xea
0397f800 7734357d user32!__fnINLPWINDOWPOS+0x37
0397f850 70f9d7bf ntdll!KiUserCallbackDispatcher+0x4d
0397f87c 70f802cf uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0397f8d8 771546df uxtheme!ThemePreWndProc+0x43f
0397f9c0 77152a3a user32!UserCallWinProcCheckWow+0x30f
0397fa34 77152800 user32!DispatchMessageWorker+0x22a
0397fa40 7b47f5a1 user32!DispatchMessageW+0x10
0397fa64 7b47f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0397fac4 7b48196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0397fad0 7b49ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0397fb0c 7658f989 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0397fb1c 77337084 kernel32!BaseThreadInitThunk+0x19
0397fb78 77337054 ntdll!__RtlUserThreadStart+0x2f
0397fb88 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04e6fa7c 00f52a68 CfgRelayEx!destroy_ptd+0x9
04e6fa88 770993c5 CfgRelayEx!destroy_fls+0x13
04e6faa4 770b216f ntdll!RtlProcessFlsData+0x57
04e6fb3c 770b2403 ntdll!LdrShutdownThread+0x35
04e6fb4c 770bf5ca ntdll!RtlExitUserThread+0x2a
04e6fc98 7601344d ntdll!TppWorkerThread+0x846
04e6fca4 77099802 kernel32!BaseThreadInitThunk+0xe
04e6fce4 770997d5 ntdll!__RtlUserThreadStart+0x70
04e6fcfc 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0431e020 7726d8aa ntdll!LdrpAppendAnsiStringToFilenameBuffer+0x20
0431e2a0 7726d7e5 ntdll!LdrpLoadForwardedDll+0x75
0431e33c 7726db53 ntdll!LdrpGetDelayloadExportDll+0x80
0431e5e8 77260a2b ntdll!LdrpHandleProtectedDelayload+0x93
0431e640 7659f708 ntdll!LdrResolveDelayLoadedAPI+0x17b
0431e660 765a0efd gdi32full!__delayLoadHelper2+0x28
0431e770 7659b8dc gdi32full!_tailMerge_textshaping_dll+0xd
0431e7b0 7659ada9 gdi32full!ScriptShape+0x17c
0431e828 7659a4d9 gdi32full!RenderItemNoFallback+0x5f9
0431e860 7659a398 gdi32full!RenderItemWithFallback+0x119
0431e888 7659a11e gdi32full!RenderItem+0x28
0431e8e0 765974d8 gdi32full!ScriptStringAnalyzeGlyphs+0x1be
0431ed44 765968df gdi32full!ScriptStringAnalyse+0x738
0431eeec 76596130 gdi32full!LpkCharsetDraw+0x60f
0431ef18 76f69f1d gdi32full!LpkDrawTextEx+0x30
0431ef74 76f69db4 user32!DT_DrawStr+0x5f
0431efd4 76f698eb user32!DT_GetLineBreak+0xa2
0431f0a4 76f696ee user32!DrawTextExWorker+0x1f9
0431f0c0 724ae8ba user32!DrawTextExW+0x1e
0431f124 724adf54 uxtheme!CTextDraw::GetTextExtent+0xa4
0431f16c 724a4429 uxtheme!GetThemeTextExtent+0x74
0431f1c0 724b1167 uxtheme!_GetNcCaptionTextSize+0x61
0431f2b4 724b2b1c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0431f360 724b2bcf uxtheme!_WindowPosChangedWorker+0x7c
0431f36c 724af735 uxtheme!OnOwpPostWindowPosChanged+0x1f
0431f3bc 76f74723 uxtheme!ThemePostWndProc+0x355
0431f4a4 76f742fa user32!UserCallWinProcCheckWow+0x363
0431f508 76f7b927 user32!DispatchClientMessage+0xea
0431f548 7729357d user32!__fnINLPWINDOWPOS+0x37
0431f598 724cd7bf ntdll!KiUserCallbackDispatcher+0x4d
0431f5c4 724b02cf uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0431f620 76f746cf uxtheme!ThemePreWndProc+0x43f
0431f708 76f72a2a user32!UserCallWinProcCheckWow+0x30f
0431f77c 76f727f0 user32!DispatchMessageWorker+0x22a
0431f788 79caf5a1 user32!DispatchMessageW+0x10
0431f7ac 79caf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0431f80c 79cb196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0431f818 79ccffcb CfgRelayEx!CThread::ThreadProc+0x1f
0431f854 75b2f989 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0431f864 77287084 kernel32!BaseThreadInitThunk+0x19
0431f8c0 77287054 ntdll!__RtlUserThreadStart+0x2f
0431f8d0 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
003bf9a0 76f5e0c3 ntdll!RtlpLowFragHeapFree+0xc5
003bf9b8 765d14bd ntdll!RtlFreeHeap+0x105
003bf9cc 67dc2d01 kernel32!HeapFree+0x14
003bf9e0 67dc0cf2 CfgRelayEx!_free_base+0x1c
003bf9f4 67dc0da6 CfgRelayEx!free_environment<wchar_t>+0x1a
003bf9fc 67dc11f3 CfgRelayEx!__dcrt_uninitialize_environments_nolock+0x29
003bfa00 67dc81c5 CfgRelayEx!uninitialize_environment+0x5
003bfa18 67dc12e7 CfgRelayEx!__acrt_execute_uninitializers+0x2f
003bfa24 67da8fac CfgRelayEx!__acrt_uninitialize+0xf
003bfa30 67da92fe CfgRelayEx!__scrt_uninitialize_crt+0x1a
003bfa6c 67da918f CfgRelayEx!dllmain_crt_process_detach+0x60
003bfa78 67da93df CfgRelayEx!dllmain_crt_dispatch+0x4e
003bfab8 67da947d CfgRelayEx!dllmain_dispatch+0xaf
003bfacc 76f69264 CfgRelayEx!_DllMainCRTStartup+0x1c
003bfaec 76f88fa8 ntdll!LdrpCallInitRoutine+0x14
003bfb90 76f88e4a ntdll!LdrShutdownProcess+0x1aa
003bfba4 765d7a3c ntdll!RtlExitUserProcess+0x74
003bfbb8 0103275a kernel32!ExitProcessStub+0x12
003bfbc4 010326ef srvhost!exit_or_terminate_process+0x40
003bfbfc 01032895 srvhost!common_exit+0xee
003bfc10 01027e90 srvhost!exit+0x11
003bfc50 765d344d srvhost!__scrt_common_main_seh+0x179
003bfc5c 76f69802 kernel32!BaseThreadInitThunk+0xe
003bfc9c 76f697d5 ntdll!__RtlUserThreadStart+0x70
003bfcb4 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0485f434 776f3012 ntdll!LdrpUpdateLoadCount2+0x4d
0485f474 758b1daf ntdll!LdrAddRefDll+0x84
0485f8f0 758b1f25 KERNELBASE!BasepGetModuleHandleExW+0x1b6
0485f90c 006400b7 KERNELBASE!GetModuleHandleExW+0x2b
0485f928 006400f6 CfgRelayEx!create_thread_parameter+0x38
0485f948 00622fff CfgRelayEx!_beginthreadex+0x2e
0485f970 0062064d CfgRelayEx!CChannelImpl::InitClientWnd+0xdf
0485f9ac 0061f2cb CfgRelayEx!CChannel::Init+0x18d
0485fa14 0062196f CfgRelayEx!CConfigCenterStub::Process+0x7b
0485fa20 0063ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0485fa5c 7540343d CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0485fa68 776e9832 kernel32!BaseThreadInitThunk+0xe
0485faa8 776e9805 ntdll!__RtlUserThreadStart+0x70
0485fac0 00000000 ntdll!_RtlUserThreadStart+0x1b