Crash in cfgrelayex, Analyzed 4 dumps, total processed 80, rate equals 5.00%

Top 1: Version = 2.7224.1000.620, Total count = 4

dump count = 1

ChildEBP RetAddr  
067ae010 76aafb2e gdi32full!pcfLocateCFONT+0x8
067ae390 76ac2caa gdi32full!GetFontRealizationInfo+0xde
067ae3c0 76ac1bb6 gdi32full!GdiRealizationInfo+0x2a
067ae474 76ac126d gdi32full!GetFaceAndSizeMetrics+0x5b
067ae578 76ab5bd4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x37
067ae918 76ab42a3 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
067aed84 76ab15c6 gdi32full!ScriptStringAnalyse+0xa23
067aef14 76ab0de0 gdi32full!LpkCharsetDraw+0x626
067aef40 75516844 gdi32full!LpkDrawTextEx+0x30
067aefa4 75516b38 user32!DT_DrawStr+0x72
067af004 754bd8fb user32!DT_GetLineBreak+0xa2
067af0bc 754bd5be user32!DrawTextExWorker+0x32b
067af0d8 710499d9 user32!DrawTextExW+0x1e
067af538 7104d3f0 uxtheme!CThemeWnd::GetNcWindowMetrics+0x899
067af5ec 7104d36f uxtheme!_WindowPosChangedWorker+0x78
067af5f8 71057961 uxtheme!OnOwpPostWindowPosChanged+0x1f
067af654 754db16e uxtheme!ThemePostWndProc+0x461
067af730 754c8503 user32!UserCallWinProcCheckWow+0x1e7
067af798 754c0328 user32!DispatchClientMessage+0x1b3
067af7e0 77a419dd user32!__fnINLPWINDOWPOS+0x48
067af830 76f02c1c ntdll!KiUserCallbackDispatcher+0x4d
067af834 71072aaf win32u!NtUserSetWindowPos+0xc
067af860 71057f76 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
067af8c0 754db118 uxtheme!ThemePreWndProc+0x566
067af99c 754c90dc user32!UserCallWinProcCheckWow+0x191
067afa08 754c8c20 user32!DispatchMessageWorker+0x4ac
067afa14 0f25f5a1 user32!DispatchMessageW+0x10
067afa38 0f25f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
067afa98 0f26196f CfgRelayEx!CConfigCenterStub::Process+0xa7
067afaa4 0f27ffcb CfgRelayEx!CThread::ThreadProc+0x1f
067afae0 74968674 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
067afaf4 77a35d87 kernel32!BaseThreadInitThunk+0x24
067afb3c 77a35d57 ntdll!__RtlUserThreadStart+0x2f
067afb4c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
003ef4d0 77a7aaed CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0xd
003ef4e8 77a7aaed CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x1d
003ef500 77a7aaed CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x1d
003ef518 77a7aaed CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x1d
003ef530 77a94bb3 CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x1d
003ef554 77a80f53 CfgRelayEx!ATL::`dynamic atexit destructor for '_AtlBaseModule''+0x179
003ef580 77a80e31 CfgRelayEx!<lambda_275893d493268fdec8709772e3fcec0e>::operator()+0x89
003ef5b4 77a80e7f CfgRelayEx!__crt_seh_guarded_call<int>::operator()<<lambda_995298e7d72eb4c2aab26c0585b3abe5>,<lambda_275893d493268fdec8709772e3fcec0e> &,<lambda_293819299cbf9a7022e18b56a874bb5c> >+0x27
003ef5d4 77a81158 CfgRelayEx!__acrt_lock_and_call<<lambda_275893d493268fdec8709772e3fcec0e> >+0x24
003ef5e8 77a80714 CfgRelayEx!_execute_onexit_table+0x17
003ef620 77a80895 CfgRelayEx!common_exit+0xa1
003ef630 77a692d7 CfgRelayEx!_cexit+0xb
003ef664 77a6918f CfgRelayEx!dllmain_crt_process_detach+0x39
003ef670 77a693df CfgRelayEx!dllmain_crt_dispatch+0x4e
003ef6b0 77a6947d CfgRelayEx!dllmain_dispatch+0xaf
003ef6c4 775a9264 CfgRelayEx!_DllMainCRTStartup+0x1c
003ef6e4 775c8fa8 ntdll!LdrpCallInitRoutine+0x14
003ef788 775c8e4a ntdll!LdrShutdownProcess+0x1aa
003ef79c 74d37a3c ntdll!RtlExitUserProcess+0x74
003ef7b0 0108275a kernel32!ExitProcessStub+0x12
003ef7bc 010826ef srvhost!exit_or_terminate_process+0x40
003ef7f4 01082895 srvhost!common_exit+0xee
003ef808 01077e90 srvhost!exit+0x11
003ef848 74d3344d srvhost!__scrt_common_main_seh+0x179
003ef854 775a9802 kernel32!BaseThreadInitThunk+0xe
003ef894 775a97d5 ntdll!__RtlUserThreadStart+0x70
003ef8ac 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
03a5f8ac 7c0c345d ntdll!RtlInitUnicodeString+0x1b
03a5f8f4 7c0c3c0f CfgRelayEx!CChannelImpl::Run+0x3d
03a5f8fc 7c0dffcb CfgRelayEx!CChannelImpl::ThreadImpl+0xf
03a5f938 77116359 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03a5f948 775b7b74 kernel32!BaseThreadInitThunk+0x19
03a5f9a4 775b7b44 ntdll!__RtlUserThreadStart+0x2f
03a5f9b4 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04ebe1a0 771f1f6f gdi32full!GetFontRealizationInfo+0x1c
04ebe750 771e7e0b gdi32full!LoadFont+0x70
04ebe774 771e7f62 gdi32full!FindOrCreateFaceCache+0xc7
04ebe880 77186ad5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
04ebec28 771874cb gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
04ebed44 77188863 gdi32full!ScriptStringAnalyse+0x3eb
04ebeec0 77186723 gdi32full!LpkCharsetDraw+0xa93
04ebef00 7574f57b gdi32full!LpkDrawTextEx+0x203
04ebef64 7574f481 user32!DT_DrawStr+0x69
04ebefbc 7574f07e user32!DT_GetLineBreak+0xf8
04ebf08c 757bcb2e user32!DrawTextExWorker+0x1c4
04ebf0a8 714c09c4 user32!DrawTextExW+0x1e
04ebf10c 714c69aa uxtheme!CTextDraw::GetTextExtent+0x109
04ebf154 714b81bd uxtheme!GetThemeTextExtent+0x8a
04ebf1a8 7148689a uxtheme!_GetNcCaptionTextSize+0x61
04ebf320 71487bde uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
04ebf404 7148c30f uxtheme!_WindowPosChangedWorker+0x73
04ebf410 714890c0 uxtheme!OnOwpPostWindowPosChanged+0x1f
04ebf478 75744630 uxtheme!ThemePostWndProc+0x340
04ebf574 7574408a user32!UserCallWinProcCheckWow+0x4f0
04ebf5d8 75751487 user32!DispatchClientMessage+0xea
04ebf618 772e91bd user32!__fnINLPWINDOWPOS+0x37
04ebf668 76e412ac ntdll!KiUserCallbackDispatcher+0x4d
04ebf66c 714b643f win32u!NtUserSetWindowPos+0xc
04ebf698 7148a458 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04ebf718 757445d8 uxtheme!ThemePreWndProc+0x988
04ebf814 75742ec5 user32!UserCallWinProcCheckWow+0x498
04ebf890 75742a10 user32!DispatchMessageWorker+0x4a5
04ebf89c 77ebf5a1 user32!DispatchMessageW+0x10
04ebf8c0 77ebf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04ebf920 77ec196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04ebf92c 77edffcb CfgRelayEx!CThread::ThreadProc+0x1f
04ebf968 76c57ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04ebf978 772dc11b kernel32!BaseThreadInitThunk+0x19
04ebf9d0 772dc09f ntdll!__RtlUserThreadStart+0x2b
04ebf9e0 00000000 ntdll!_RtlUserThreadStart+0x1b