Crash in textshaping, Analyzed 2 dumps, total processed 287, rate equals 0.70%

Top 1: Version = v1.7224.1005.626, Total count = 2

dump count = 1

ChildEBP RetAddr  
04ebe008 6fedd931 gdi32full!CUspShapingFont::GetFontTable+0x9
04ebe034 6ff038c5 TextShaping!COtlsClient::GetOtlTable+0xb1
04ebe06c 6ff064f5 TextShaping!GetScriptFeatureLookupLists+0xd5
04ebe27c 6ff02b31 TextShaping!ApplyFeatures+0xb5
04ebe300 6feeeed3 TextShaping!RePositionOtlGlyphs+0x1a1
04ebe330 6feeb88c TextShaping!ShapingLibraryInternal::RePositionOtlGlyphsWithFallback+0x23
04ebe5f8 6fedcf7b TextShaping!GenericEngineGetGlyphPositions+0x63c
04ebe6fc 7719d880 TextShaping!ShapingGetGlyphPositions+0x48b
04ebe850 7719c500 gdi32full!ShlPlaceOT+0x240
04ebe8e8 7719be19 gdi32full!RenderItemNoFallback+0x410
04ebe920 7719bcd8 gdi32full!RenderItemWithFallback+0x119
04ebe948 7719ba5e gdi32full!RenderItem+0x28
04ebe9a0 77198e18 gdi32full!ScriptStringAnalyzeGlyphs+0x1be
04ebee04 771981ef gdi32full!ScriptStringAnalyse+0x738
04ebef84 77197a40 gdi32full!LpkCharsetDraw+0x60f
04ebefb0 7577d4ed gdi32full!LpkDrawTextEx+0x30
04ebf00c 7577d384 user32!DT_DrawStr+0x5f
04ebf06c 7577cebb user32!DT_GetLineBreak+0xa2
04ebf13c 7577ccbe user32!DrawTextExWorker+0x1f9
04ebf158 733be6ca user32!DrawTextExW+0x1e
04ebf1bc 733bdd34 uxtheme!CTextDraw::GetTextExtent+0xa4
04ebf204 733b43c9 uxtheme!GetThemeTextExtent+0x74
04ebf258 733c0f87 uxtheme!_GetNcCaptionTextSize+0x61
04ebf348 733c293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
04ebf3f4 733c29ef uxtheme!_WindowPosChangedWorker+0x7c
04ebf400 733bf545 uxtheme!OnOwpPostWindowPosChanged+0x1f
04ebf450 75787eb3 uxtheme!ThemePostWndProc+0x355
04ebf53c 75787a8a user32!UserCallWinProcCheckWow+0x363
04ebf5a0 7578f7d7 user32!DispatchClientMessage+0xea
04ebf5e0 775154bd user32!__fnINLPWINDOWPOS+0x37
04ebf630 733dd44f ntdll!KiUserCallbackDispatcher+0x4d
04ebf65c 733c00ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04ebf6b8 75787e5f uxtheme!ThemePreWndProc+0x43f
04ebf7a4 757867c1 user32!UserCallWinProcCheckWow+0x30f
04ebf820 757862e0 user32!DispatchMessageWorker+0x4d1
04ebf82c 7b35f5a1 user32!DispatchMessageW+0x10
04ebf850 7b35f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04ebf8b0 7b36196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04ebf8bc 7b37ffcb CfgRelayEx!CThread::ThreadProc+0x1f
04ebf8f8 76f8fcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04ebf908 7750809e kernel32!BaseThreadInitThunk+0x19
04ebf964 7750806e ntdll!__RtlUserThreadStart+0x2f
04ebf974 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0500e00c 5fd52ca8 TextShaping!COtlsClient::GetOtlTable+0x90
0500e044 5fd55955 TextShaping!GetScriptFeatureLookupLists+0x58
0500e254 5fd51991 TextShaping!ApplyFeatures+0xb5
0500e2d8 5fd3e18d TextShaping!SubstituteOtlGlyphs+0x181
0500e300 5fd3a2fb TextShaping!ShapingLibraryInternal::SubstituteOtlGlyphsWithFallback+0x1d
0500e59c 5fd2cb96 TextShaping!GenericEngineGetGlyphs+0x79b
0500e668 7682ded6 TextShaping!ShapingGetGlyphs+0x356
0500e79c 7682d398 gdi32full!ShlShapeOT+0x1c6
0500e7f0 7682c899 gdi32full!ScriptShape+0x148
0500e868 7682bfc9 gdi32full!RenderItemNoFallback+0x5f9
0500e8a0 7682be88 gdi32full!RenderItemWithFallback+0x119
0500e8c8 7682bc0e gdi32full!RenderItem+0x28
0500e920 76828fb8 gdi32full!ScriptStringAnalyzeGlyphs+0x1be
0500ed84 7682838f gdi32full!ScriptStringAnalyse+0x738
0500ef0c 76827be0 gdi32full!LpkCharsetDraw+0x60f
0500ef38 760ed2bd gdi32full!LpkDrawTextEx+0x30
0500ef94 760ed154 user32!DT_DrawStr+0x5f
0500eff4 760ecc8b user32!DT_GetLineBreak+0xa2
0500f0c4 760eca8e user32!DrawTextExWorker+0x1f9
0500f0e0 722be71a user32!DrawTextExW+0x1e
0500f144 722bdd84 uxtheme!CTextDraw::GetTextExtent+0xa4
0500f18c 722b43e9 uxtheme!GetThemeTextExtent+0x74
0500f1e0 722c0fc7 uxtheme!_GetNcCaptionTextSize+0x61
0500f2d4 722c297c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0500f380 722c2a2f uxtheme!_WindowPosChangedWorker+0x7c
0500f38c 722bf595 uxtheme!OnOwpPostWindowPosChanged+0x1f
0500f3dc 760f8373 uxtheme!ThemePostWndProc+0x355
0500f4c4 760f7f4a user32!UserCallWinProcCheckWow+0x363
0500f528 760ff357 user32!DispatchClientMessage+0xea
0500f568 77604f6d user32!__fnINLPWINDOWPOS+0x37
0500f5b8 722dd6cf ntdll!KiUserCallbackDispatcher+0x4d
0500f5e4 722c012f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0500f640 760f831f uxtheme!ThemePreWndProc+0x43f
0500f728 760f60ba user32!UserCallWinProcCheckWow+0x30f
0500f79c 760f5e80 user32!DispatchMessageWorker+0x22a
0500f7a8 7a010bc1 user32!DispatchMessageW+0x10
0500f7cc 7a010a7b AcMgr!WTL::CMessageLoop::Run+0xc1
0500f828 7a01477f AcMgr!CPopMgrTrayClient::Process+0x8b
0500f834 7a0c3f20 AcMgr!CThread::ThreadProc+0x1f
0500f870 766400c9 AcMgr!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0500f880 775f7b4e kernel32!BaseThreadInitThunk+0x19
0500f8dc 775f7b1e ntdll!__RtlUserThreadStart+0x2f
0500f8ec 00000000 ntdll!_RtlUserThreadStart+0x1b