Crash in cfgrelayex, Analyzed 2 dumps, total processed 78, rate equals 2.56%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
0541e358 76481bde gdi32full!GetFontRealizationInfo+0x15
0541e908 764829fc gdi32full!LoadFont+0x76
0541e92c 764834f3 gdi32full!FindOrCreateFaceCache+0x98
0541ea30 7648adf4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0541edd8 764891f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
0541f244 764882ef gdi32full!ScriptStringAnalyse+0xa16
0541f3ec 76487b40 gdi32full!LpkCharsetDraw+0x60f
0541f418 7654d37d gdi32full!LpkDrawTextEx+0x30
0541f474 7654d214 user32!DT_DrawStr+0x5f
0541f4d4 7654cd4b user32!DT_GetLineBreak+0xa2
0541f5a4 7654cb4e user32!DrawTextExWorker+0x1f9
0541f5c0 734ce6ca user32!DrawTextExW+0x1e
0541f624 734cdd34 uxtheme!CTextDraw::GetTextExtent+0xa4
0541f66c 734c43c9 uxtheme!GetThemeTextExtent+0x74
0541f6c0 734d0f87 uxtheme!_GetNcCaptionTextSize+0x61
0541f7b0 734d293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0541f85c 734d29ef uxtheme!_WindowPosChangedWorker+0x7c
0541f868 734cf545 uxtheme!OnOwpPostWindowPosChanged+0x1f
0541f8b8 76557ff3 uxtheme!ThemePostWndProc+0x355
0541f9a4 76557bca user32!UserCallWinProcCheckWow+0x363
0541fa08 7655fc37 user32!DispatchClientMessage+0xea
0541fa48 77e654ed user32!__fnINLPWINDOWPOS+0x37
0541fa98 7753124c ntdll!KiUserCallbackDispatcher+0x4d
0541fa9c 734ed44f win32u!NtUserSetWindowPos+0xc
0541fac8 734d00ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0541fb24 76557f9f uxtheme!ThemePreWndProc+0x43f
0541fc10 76556901 user32!UserCallWinProcCheckWow+0x30f
0541fc8c 76556420 user32!DispatchMessageWorker+0x4d1
0541fc98 5a53f5a1 user32!DispatchMessageW+0x10
0541fcbc 5a53f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0541fd1c 5a54196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0541fd28 5a55ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0541fd64 778afcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0541fd74 77e580ce kernel32!BaseThreadInitThunk+0x19
0541fdd0 77e5809e ntdll!__RtlUserThreadStart+0x2f
0541fde0 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

0351f4e4 028b8bfd CfgRelayEx!CConfigCenterStub::UnregisterClient+0x1a
0351f6a4 028ffab2 base!ConfigMgrImpl::ConfigUninit+0x17d
0351f79c 029001fc base!CMainWnd::OnClose+0x172
0351f7ac 0289311c base!CMainWnd::ProcessWindowMessage+0x4c
0351f7fc 755b6238 base!ATL::CWindowImplBaseT<ATL::CWindow,ATL::CWinTraits<1442840576,0> >::WindowProc+0x6c
0351f828 755b68ea user32!InternalCallWinProc+0x23
0351f8a0 755b7d31 user32!UserCallWinProcCheckWow+0x109
0351f900 755b7dfa user32!DispatchMessageWorker+0x3bc
0351f910 0286adc3 user32!DispatchMessageW+0xf
0351fb0c 0286ca6f base!CBasicTrayClient::MainEntry+0x343
0351fb14 029ff4d3 base!CBasicTrayClient::ThreadProc+0xf
0351fb50 7686344d base!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0351fb5c 77159802 kernel32!BaseThreadInitThunk+0xe
0351fb9c 771597d5 ntdll!__RtlUserThreadStart+0x70
0351fbb4 00000000 ntdll!_RtlUserThreadStart+0x1b