Crash in brobasic, Analyzed 18 dumps, total processed 49, rate equals 36.73%

Top 1: Version = 1.7224.1000.625, Total count = 18

dump count = 5

05fff5b4 0fd283f0 oleacc!AccWrap_Annotate::get_accName+0x59
05fff714 0fd31c2c BroBasic!BrowserChromeBaseImpl::GetEventInfo+0xf0
05fffba0 0fdc36e7 BroBasic!BrowserMgrImpl::BrowserEventProc+0x73c
05fffbc8 76a22e9f BroBasic!WinEventProc+0x57
05fffbf8 77bc6b3e user32!__ClientCallWinEventProc+0x2a
05fffc2c 76a2cb80 ntdll!KiUserCallbackDispatcher+0x2e
05fffc30 76a2cbb3 user32!NtUserGetMessage+0xc
05fffc4c 0fdbf899 user32!GetMessageW+0x33
05fffda0 0fd1ad73 BroBasic!CBrowserBasicTrayClient::AsyncStart+0x489
05fffdf4 0fdfa623 BroBasic!LdsThread::ThreadProc+0x123
05fffe30 77aeef3c BroBasic!thread_start<unsigned int (__stdcall*)(void *)>+0x57
05fffe3c 77be3618 kernel32!BaseThreadInitThunk+0xe
05fffe7c 77be35eb ntdll!__RtlUserThreadStart+0x70
05fffe94 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 3

03aceb38 50c298ea uiautomationcore!CAutomationElement::FindFirst+0xed
03aced24 50c29077 BroBasic!BrowserChromeBaseImpl::initUrlPattern+0x1ba
03aceef0 50c27c49 BroBasic!BrowserChromeBaseImpl::getUrl+0x267
03acf528 50c30a0a BroBasic!BrowserChromeBaseImpl::EventProc+0x5c9
03acf754 50c1ad73 BroBasic!<lambda_63e9dbefc06103dbcacee24e5f435956>::operator()+0x5ba
03acf7a8 50cfa623 BroBasic!LdsThread::ThreadProc+0x123
03acf7e4 769f343d BroBasic!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03acf7f0 77609802 kernel32!BaseThreadInitThunk+0xe
03acf830 776097d5 ntdll!__RtlUserThreadStart+0x70
03acf848 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

05a2ef0c 515d97bf ole32!CoCreateInstance+0x37
05a2f0fc 515d9077 BroBasic!BrowserChromeBaseImpl::initUrlPattern+0x8f
05a2f2c8 515d7c49 BroBasic!BrowserChromeBaseImpl::getUrl+0x267
05a2f900 515e0a0a BroBasic!BrowserChromeBaseImpl::EventProc+0x5c9
05a2fb2c 515cad73 BroBasic!<lambda_63e9dbefc06103dbcacee24e5f435956>::operator()+0x5ba
05a2fb80 516aa623 BroBasic!LdsThread::ThreadProc+0x123
05a2fbbc 777e344d BroBasic!thread_start<unsigned int (__stdcall*)(void *)>+0x57
05a2fbc8 77e39802 kernel32!BaseThreadInitThunk+0xe
05a2fc08 77e397d5 ntdll!__RtlUserThreadStart+0x70
05a2fc20 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
058efc08 63710a0a BroBasic!CAcceptorMgrImpl::`RTTI Complete Object Locator'
058efe34 636fad73 BroBasic!<lambda_63e9dbefc06103dbcacee24e5f435956>::operator()+0x5ba
058efe88 637da623 BroBasic!LdsThread::ThreadProc+0x123
058efec4 7581fcc9 BroBasic!thread_start<unsigned int (__stdcall*)(void *)>+0x57
058efed4 76ee80ce kernel32!BaseThreadInitThunk+0x19
058eff30 76ee809e ntdll!__RtlUserThreadStart+0x2f
058eff40 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

0531f160 7c1398bc uiautomationcore!CUIAutomation::ElementFromHandle+0x128
0531f348 7c139077 BroBasic!BrowserChromeBaseImpl::initUrlPattern+0x18c
0531f514 7c137c49 BroBasic!BrowserChromeBaseImpl::getUrl+0x267
0531fb4c 7c140a0a BroBasic!BrowserChromeBaseImpl::EventProc+0x5c9
0531fd78 7c12ad73 BroBasic!<lambda_63e9dbefc06103dbcacee24e5f435956>::operator()+0x5ba
0531fdcc 7c20a623 BroBasic!LdsThread::ThreadProc+0x123
0531fe08 74e7fa29 BroBasic!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0531fe18 76fa7a7e kernel32!BaseThreadInitThunk+0x19
0531fe74 76fa7a4e ntdll!__RtlUserThreadStart+0x2f
0531fe84 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

0042faa0 5536fcd6 kernel32!HeapFree+0x14
0042fab4 55386d5a BroBasic!ATL::CWin32Heap::Free+0x16
0042facc 55386d3d BroBasic!std::_Tree<std::_Tmap_traits<HWND__ *,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<HWND__ *>,std::allocator<std::pair<HWND__ * const,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x3a
0042fae4 55386d3d BroBasic!std::_Tree<std::_Tmap_traits<HWND__ *,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<HWND__ *>,std::allocator<std::pair<HWND__ * const,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x1d
0042fafc 5546f683 BroBasic!std::_Tree<std::_Tmap_traits<HWND__ *,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<HWND__ *>,std::allocator<std::pair<HWND__ * const,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x1d
0042fb20 554592e0 BroBasic!ATL::`dynamic atexit destructor for '_AtlBaseModule''+0x595
0042fb4c 554591be BroBasic!<lambda_275893d493268fdec8709772e3fcec0e>::operator()+0x89
0042fb80 5545920c BroBasic!__crt_seh_guarded_call<int>::operator()<<lambda_995298e7d72eb4c2aab26c0585b3abe5>,<lambda_275893d493268fdec8709772e3fcec0e> &,<lambda_293819299cbf9a7022e18b56a874bb5c> >+0x27
0042fba0 554594e5 BroBasic!__acrt_lock_and_call<<lambda_275893d493268fdec8709772e3fcec0e> >+0x24
0042fbb4 554589ee BroBasic!_execute_onexit_table+0x17
0042fbec 55458b6f BroBasic!common_exit+0xa1
0042fbfc 55433a8d BroBasic!_cexit+0xb
0042fc30 55433945 BroBasic!dllmain_crt_process_detach+0x39
0042fc3c 55433b95 BroBasic!dllmain_crt_dispatch+0x4e
0042fc7c 55433c33 BroBasic!dllmain_dispatch+0xaf
0042fc90 77129264 BroBasic!_DllMainCRTStartup+0x1c
0042fcb0 77148fa8 ntdll!LdrpCallInitRoutine+0x14
0042fd54 77148e4a ntdll!LdrShutdownProcess+0x1aa
0042fd68 74b27a3c ntdll!RtlExitUserProcess+0x74
0042fd7c 0005275a kernel32!ExitProcessStub+0x12
0042fd88 000526ef srvhost!exit_or_terminate_process+0x40
0042fdc0 00052895 srvhost!common_exit+0xee
0042fdd4 00047e90 srvhost!exit+0x11
0042fe14 74b2344d srvhost!__scrt_common_main_seh+0x179
0042fe20 77129802 kernel32!BaseThreadInitThunk+0xe
0042fe60 771297d5 ntdll!__RtlUserThreadStart+0x70
0042fe78 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0489e7b0 76cee6e0 BroBasic!`ATL::CAtlStringMgr::GetInstance'::`2'::strHeap
0489e7c4 76bdf0b8 ole32!InitChannelIfNecessary+0x10
0489e83c 6bc22e0b ole32!CoUnmarshalInterface+0x38
0489e85c 6bc22f9d oleacc!UnmarshalInterface+0x75
0489e894 6bc22e5a oleacc!FreeUpSlot+0x1e2
0489e8b0 6bc23460 oleacc!ObjectFromLresult+0x3f
0489e8d0 6bc22b99 oleacc!NativeIAccessibleFromWindow+0x82
0489e8ec 6bc22ac3 oleacc!ORIGINAL_AccessibleObjectFromWindow+0x18
0489e910 6bbd8cfa oleacc!AccessibleObjectFromWindow+0x1a
0489e930 6bbdbddf uiautomationcore!GetIAccessibleForHwnd+0x1f
0489e964 6bbf1a4c uiautomationcore!CreateMsaaProxy+0x2c
0489e980 6bbf19ee uiautomationcore!CreateOutOfProcMsaaProxy+0x18
0489e998 6bbf231d uiautomationcore!CBuiltinProxyFactory::CreateProvider+0x21
0489f040 6bbf24bf uiautomationcore!ClientProxyManager::InternalGetProxyProvider+0x2e6
0489f074 6bba4e96 uiautomationcore!ClientProxyManager::GetProxyProvider+0x4a
0489f0b4 6bb9a748 uiautomationcore!UiaNodeFactory::GetOverrideProviderForHwnd+0x4d
0489f0f4 6bb9ad44 uiautomationcore!UiaNodeFactory::CompleteNodeInfo+0x281
0489f110 6bb9aad2 uiautomationcore!UiaNodeFactory::FromPartialNodeInfo+0x18
0489f160 6bbe0e7e uiautomationcore!UiaNodeFactory::FromHwnd+0x2a
0489f198 53ba98bc uiautomationcore!CUIAutomation::ElementFromHandle+0xb5
0489f380 53ba9077 BroBasic!BrowserChromeBaseImpl::initUrlPattern+0x18c
0489f54c 53ba7c49 BroBasic!BrowserChromeBaseImpl::getUrl+0x267
0489fb84 53bb0a0a BroBasic!BrowserChromeBaseImpl::EventProc+0x5c9
0489fdb0 53b9ad73 BroBasic!<lambda_63e9dbefc06103dbcacee24e5f435956>::operator()+0x5ba
0489fe04 53c7a623 BroBasic!LdsThread::ThreadProc+0x123
0489fe40 76a5343d BroBasic!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0489fe4c 771c9832 kernel32!BaseThreadInitThunk+0xe
0489fe8c 771c9805 ntdll!__RtlUserThreadStart+0x70
0489fea4 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

0552f404 579e83c1 oleacc!EXTERNAL_AccessibleObjectFromEvent+0x27
0552f560 579f1c2c BroBasic!BrowserChromeBaseImpl::GetEventInfo+0xc1
0552f9ec 57a836e7 BroBasic!BrowserMgrImpl::BrowserEventProc+0x73c
0552fa14 75c3fdc9 BroBasic!WinEventProc+0x57
0552fa58 778a507d user32!__ClientCallWinEventProc+0x39
0552fa90 7574106c ntdll!KiUserCallbackDispatcher+0x4d
0552fa94 75c3bcce win32u!NtUserGetMessage+0xc
0552fad0 57a7f899 user32!GetMessageW+0x2e
0552fc24 579dad73 BroBasic!CBrowserBasicTrayClient::AsyncStart+0x489
0552fc78 57aba623 BroBasic!LdsThread::ThreadProc+0x123
0552fcb4 757ffcc9 BroBasic!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0552fcc4 77897c5e kernel32!BaseThreadInitThunk+0x19
0552fd20 77897c2e ntdll!__RtlUserThreadStart+0x2f
0552fd30 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0652f738 0f0e1c2c BroBasic!BrowserChromeBaseImpl::GetEventInfo+0x4cd
0652fbc4 0f1736e7 BroBasic!BrowserMgrImpl::BrowserEventProc+0x73c
0652fbec 76e24454 BroBasic!WinEventProc+0x57
0652fc1c 77bd6b3e user32!__ClientCallWinEventProc+0x2a
0652fc50 76e28f8f ntdll!KiUserCallbackDispatcher+0x2e
0652fc54 76e28fc2 user32!NtUserGetMessage+0xc
0652fc70 0f16f899 user32!GetMessageW+0x33
0652fdc4 0f0cad73 BroBasic!CBrowserBasicTrayClient::AsyncStart+0x489
0652fe18 0f1aa623 BroBasic!LdsThread::ThreadProc+0x123
0652fe54 7663ef6c BroBasic!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0652fe60 77bf3618 kernel32!BaseThreadInitThunk+0xe
0652fea0 77bf35eb ntdll!__RtlUserThreadStart+0x70
0652feb8 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
008ff0e4 5c8f630a BroBasic!std::_Tree<std::_Tmap_traits<HWND__ *,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<HWND__ *>,std::allocator<std::pair<HWND__ * const,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::find+0xb
008ff1ec 0033e31d BroBasic!BrowserSougouImpl::EventProc+0x5da
008ff210 0033e84a srvhost!CPluginMgr::StartTpi+0x6d
008ff214 0033b690 srvhost!std::_Func_impl_no_alloc<std::_Binder<std::_Unforced,void (__thiscall CPluginMgr::*)(void),CPluginMgr *>,void,void *>::_Do_call+0xa
008ff2b4 0033b88c srvhost!CDelayCall::ProcessWindowMessage+0x120
008ff304 737e1836 srvhost!ATL::CWindowImplBaseT<ATL::CWindow,ATL::CWinTraits<1442840576,0> >::WindowProc+0x6c
008ff324 7703199b atlthunk!AtlThunk_0x00+0x36
008ff350 77027dba user32!_InternalCallWinProc+0x2b
008ff438 770266f1 user32!UserCallWinProcCheckWow+0x33a
008ff4b4 77026210 user32!DispatchMessageWorker+0x4d1
008ff4c0 0033a5ff user32!DispatchMessageW+0x10
008ffb14 00347e11 srvhost!main+0x71f
008ffb5c 7541fcc9 srvhost!__scrt_common_main_seh+0xfa
008ffb6c 77297cbe kernel32!BaseThreadInitThunk+0x19
008ffbc8 77297c8e ntdll!__RtlUserThreadStart+0x2f
008ffbd8 00000000 ntdll!_RtlUserThreadStart+0x1b