Crash in cfgrelay, Analyzed 5 dumps, total processed 65, rate equals 7.69%

Top 1: Version = 2.7224.1000.620, Total count = 5

dump count = 1

0689feb4 763a343d CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0689fec0 773f9802 kernel32!BaseThreadInitThunk+0xe
0689ff00 773f97d5 ntdll!__RtlUserThreadStart+0x70
0689ff18 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0409de90 764a5b7c urlmon!_chkstk+0x27
0409eef8 764a5848 urlmon!CINetHttp::QueryStatusOnResponse+0x1b9
0409ef10 764a5752 urlmon!CINet::QueryInfoOnResponse+0x51
0409ef20 764a57d9 urlmon!CINet::INetQueryInfo+0x55
0409ef34 764a52ad urlmon!CINet::OnINetInternal+0x9e
0409ef48 764a528d urlmon!CINet::MyContinue+0x17
0409ef58 764a5271 urlmon!CINetProtImpl::Continue+0x13
0409ef68 764a524e urlmon!CINetEmbdFilter::Continue+0x14
0409ef80 764a1e6b urlmon!CINet::Continue+0x28
0409ef90 764a1e42 urlmon!COInetProt::Continue+0x14
0409efa0 764a1e4d urlmon!CTransaction::OnINetInternalCallback+0x2d
0409efc0 76498dac urlmon!CTransaction::OnINetCallback+0x8b
0409efd8 760ac4e7 urlmon!TransactionWndProc+0x28
0409f004 760ac5e7 user32!InternalCallWinProc+0x23
0409f07c 760acc19 user32!UserCallWinProcCheckWow+0x14b
0409f0dc 760a2e41 user32!DispatchMessageWorker+0x35e
0409f0ec 764a424b user32!DispatchMessageA+0xf
0409f12c 764a419b urlmon!CTransaction::CompleteOperation+0x86
0409f168 7649b6f0 urlmon!CTransaction::StartEx+0x578
0409f1f0 7649b265 urlmon!CBinding::StartBinding+0x602
0409f234 7649b346 urlmon!CUrlMon::StartBinding+0x169
0409f25c 764bb567 urlmon!CUrlMon::BindToStorage+0x90
0409f2a0 764bb68c urlmon!CBaseBSCB::KickOffDownload+0x193
0409f450 0f1b0855 urlmon!URLDownloadToCacheFileW+0x108
0409f8ac 0f1ae5e9 CfgRelay!CStatisticImpl::InternalDownloadFile+0xa5
0409f908 0f1e8cc3 CfgRelay!CStatisticImpl::DownloadThreadProc+0x139
0409f944 75ceef6c CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0409f950 776e3618 kernel32!BaseThreadInitThunk+0xe
0409f990 776e35eb ntdll!__RtlUserThreadStart+0x70
0409f9a8 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04e5e034 7345685e KERNELBASE!MultiByteToWideChar+0x1b
04e5e064 734a140f urlmon!WzA2WDynamic+0x1d
04e5e280 734a1262 urlmon!CTransData::GetAcceptStr+0x8d
04e5e298 734aee66 urlmon!CBinding::GetBindString+0x82
04e5e2cc 734ad656 urlmon!CTransaction::GetBindString+0x76
04e5eb28 734ad59e urlmon!CINetHttp::INetAsyncOpenRequest+0x86
04e5eb54 734ac29c urlmon!CINet::INetAsyncConnect+0x2ee
04e5eb78 7349cd1c urlmon!CINet::INetAsyncOpen+0x2c
04e5ebb8 7349c96a urlmon!CINet::StartCommon+0x3ac
04e5ebd4 734883ed urlmon!CINet::StartEx+0x1a
04e5ec10 7349e0e6 urlmon!COInetProt::StartEx+0x56d
04e5f0d0 734a001d urlmon!LegacyTransaction::StartEx+0x1026
04e5f1fc 7349bc33 urlmon!CBinding::StartBinding+0x17ed
04e5f25c 7349b7e3 urlmon!CUrlMon::StartBinding+0x1c3
04e5f288 734914cf urlmon!CUrlMon::BindToStorage+0x83
04e5f2d4 73532d3e urlmon!CBaseBSCB::KickOffDownload+0x8f
04e5f50c 7cd70855 urlmon!URLDownloadToCacheFileW+0x8e
04e5f968 7cd6e5e9 CfgRelay!CStatisticImpl::InternalDownloadFile+0xa5
04e5f9c4 7cda8cc3 CfgRelay!CStatisticImpl::DownloadThreadProc+0x139
04e5fa00 76f4fcc9 CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04e5fa10 77cf80ce kernel32!BaseThreadInitThunk+0x19
04e5fa6c 77cf809e ntdll!__RtlUserThreadStart+0x2f
04e5fa7c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
05c5f880 77692d4a ntdll!RtlpCoalesceFreeBlocks+0x702
05c5f978 77692c35 ntdll!RtlpFreeHeap+0x1f4
05c5f998 76f814ad ntdll!RtlFreeHeap+0x142
05c5f9ac 77082f8b kernel32!HeapFree+0x14
05c5f9d4 77082db7 urlmon!TlsDllMain+0x1ee
05c5f9f0 77082caa urlmon!DllMain+0x380
05c5fa54 77699280 urlmon!__DllMainCRTStartup+0x107
05c5fa74 776b21fc ntdll!LdrpCallInitRoutine+0x14
05c5fb18 776b23e3 ntdll!LdrShutdownThread+0xe6
05c5fb28 771e19e8 ntdll!RtlExitUserThread+0x2a
05c5fb3c 76f9d5b2 KERNELBASE!FreeLibraryAndExitThread+0x5f
05c5fb4c 77a18d76 kernel32!FreeLibraryAndExitThreadStub+0x10
05c5fb60 77a18e52 CfgRelay!common_end_thread+0x56
05c5fb6c 77a18cc8 CfgRelay!_endthreadex+0xd
05c5fba8 76f8343d CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x5c
05c5fbb4 77699812 kernel32!BaseThreadInitThunk+0xe
05c5fbf4 776997e5 ntdll!__RtlUserThreadStart+0x70
05c5fc0c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
05eeeb44 0f8c97e2 KERNELBASE!RaiseException+0x62
05eeeb88 0f8b82db CfgRelay!_CxxThrowException+0x66
05eeeba4 05eeebb4 CfgRelay!__scrt_throw_std_bad_alloc+0x1c
WARNING: Frame IP not in any known module. Following frames may be wrong.
05eeeba8 0f87ecec 0x5eeebb4
05eeebb4 0f86eb67 CfgRelay!std::_Default_allocate_traits::_Allocate+0xc
05eeebcc 0f86eb15 CfgRelay!std::_Allocate_manually_vector_aligned<std::_Default_allocate_traits>+0x27
05eeebd8 0f880f19 CfgRelay!std::_Allocate<8,std::_Default_allocate_traits,0>+0x15
05eeebe8 0f87f8c6 CfgRelay!std::allocator<char>::allocate+0x19
05eeec1c 0f874ed9 CfgRelay!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::_Construct_lv_contents+0xa6
05eeec40 0f879f9e CfgRelay!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::basic_string<char,std::char_traits<char>,std::allocator<char> >+0x59
05eeed30 0f86ccaf CfgRelay!SlowCfgReaderHandler::EndObject+0x12e
05eeed48 0f86d7f1 CfgRelay!rapidjson::GenericReader<rapidjson::UTF8<char>,rapidjson::UTF8<char>,rapidjson::CrtAllocator>::ParseObject<0,rapidjson::GenericStringStream<rapidjson::UTF8<char> >,SlowCfgReaderHandler>+0x28f
05eeed60 0f86b6f3 CfgRelay!rapidjson::GenericReader<rapidjson::UTF8<char>,rapidjson::UTF8<char>,rapidjson::CrtAllocator>::ParseValue<0,rapidjson::GenericStringStream<rapidjson::UTF8<char> >,SlowCfgReaderHandler>+0x91
05eeed88 0f86b83b CfgRelay!rapidjson::GenericReader<rapidjson::UTF8<char>,rapidjson::UTF8<char>,rapidjson::CrtAllocator>::Parse<0,rapidjson::GenericStringStream<rapidjson::UTF8<char> >,SlowCfgReaderHandler>+0x123
05eeeda0 0f87859a CfgRelay!rapidjson::GenericReader<rapidjson::UTF8<char>,rapidjson::UTF8<char>,rapidjson::CrtAllocator>::Parse<rapidjson::GenericStringStream<rapidjson::UTF8<char> >,SlowCfgReaderHandler>+0x1b
05eeee90 0f87b0d3 CfgRelay!RapidJsonParser::AddSlowCfg+0x8a
05eeef0c 0f88941c CfgRelay!CConfigMgr::InitLocalCfg+0xb3
05eeef80 0f88cc9d CfgRelay!CMainWnd::OnCreate+0x7c
05eeef98 0f88a212 CfgRelay!CMainWnd::_ProcessWindowMessage+0x3d
05eeefc4 0f88c327 CfgRelay!CMainWnd::ProcessWindowMessage+0x32
05eef020 72ff1896 CfgRelay!ATL::CWindowImplBaseT<ATL::CWindow,ATL::CWinTraits<1442840576,0> >::WindowProc+0x67
05eef040 7517e18b atlthunk!AtlThunk_0x02+0x36
05eef06c 75188a29 user32!_InternalCallWinProc+0x2b
05eef090 7518b358 user32!InternalCallWinProc+0x20
05eef160 751785d3 user32!UserCallWinProcCheckWow+0x1be
05eef1c8 7517b2d5 user32!DispatchClientMessage+0x1b3
05eef210 77e11b3d user32!__fnINLPCREATESTRUCT+0xa5
05eef294 751be114 ntdll!KiUserCallbackDispatcher+0x4d
05eef574 7517ae3a user32!VerNtUserCreateWindowEx+0x244
05eef65c 7517ab68 user32!CreateWindowInternal+0x2ce
05eef69c 0f868f50 user32!CreateWindowExW+0x38
05eef6e0 0f868e70 CfgRelay!ATL::CWindowImplBaseT<ATL::CWindow,ATL::CWinTraits<1442840576,0> >::Create+0xd0
05eef714 0f86962e CfgRelay!ATL::CWindowImpl<CMainWnd,ATL::CWindow,ATL::CWinTraits<1442840576,0> >::Create+0x90
05eef78c 0f892e5f CfgRelay!CConfigCenterTrayClient::Process+0x6e
05eef798 0f8d8cc3 CfgRelay!CThread::ThreadProc+0x1f
05eef7d4 75438674 CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
05eef7e8 77e05ec7 kernel32!BaseThreadInitThunk+0x24
05eef830 77e05e97 ntdll!__RtlUserThreadStart+0x2f
05eef840 00000000 ntdll!_RtlUserThreadStart+0x1b