Crash in cfgrelayex, Analyzed 4 dumps, total processed 178, rate equals 2.25%

Top 1: Version = 2.7224.1000.620, Total count = 4

dump count = 1

ChildEBP RetAddr  
04eae018 778178fc gdi32full!pcfLocateCFONT+0x8
04eae398 77811aae gdi32full!GetFontRealizationInfo+0xdc
04eae948 778128dc gdi32full!LoadFont+0x76
04eae96c 778133e3 gdi32full!FindOrCreateFaceCache+0x98
04eaea70 7781acf4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
04eaee18 778190f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
04eaf284 778181ef gdi32full!ScriptStringAnalyse+0xa16
04eaf42c 77817a40 gdi32full!LpkCharsetDraw+0x60f
04eaf458 773cd4ed gdi32full!LpkDrawTextEx+0x30
04eaf4b4 773cd384 user32!DT_DrawStr+0x5f
04eaf514 773ccebb user32!DT_GetLineBreak+0xa2
04eaf5e4 773cccbe user32!DrawTextExWorker+0x1f9
04eaf600 6ddbe6ca user32!DrawTextExW+0x1e
04eaf664 6ddbdd34 uxtheme!CTextDraw::GetTextExtent+0xa4
04eaf6ac 6ddb43c9 uxtheme!GetThemeTextExtent+0x74
04eaf700 6ddc0f87 uxtheme!_GetNcCaptionTextSize+0x61
04eaf7f0 6ddc293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
04eaf89c 6ddc29ef uxtheme!_WindowPosChangedWorker+0x7c
04eaf8a8 6ddbf545 uxtheme!OnOwpPostWindowPosChanged+0x1f
04eaf8f8 773d7eb3 uxtheme!ThemePostWndProc+0x355
04eaf9e4 773d7a8a user32!UserCallWinProcCheckWow+0x363
04eafa48 773df7d7 user32!DispatchClientMessage+0xea
04eafa88 77bd54bd user32!__fnINLPWINDOWPOS+0x37
04eafad8 6dddd44f ntdll!KiUserCallbackDispatcher+0x4d
04eafb04 6ddc00ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04eafb60 773d7e5f uxtheme!ThemePreWndProc+0x43f
04eafc4c 773d67c1 user32!UserCallWinProcCheckWow+0x30f
04eafcc8 773d62e0 user32!DispatchMessageWorker+0x4d1
04eafcd4 7888f5a1 user32!DispatchMessageW+0x10
04eafcf8 7888f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04eafd58 7889196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04eafd64 788affcb CfgRelayEx!CThread::ThreadProc+0x1f
04eafda0 759ffcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04eafdb0 77bc809e kernel32!BaseThreadInitThunk+0x19
04eafe0c 77bc806e ntdll!__RtlUserThreadStart+0x2f
04eafe1c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
06aee208 76151bde gdi32full!GetFontRealizationInfo+0x15
06aee7b8 761529fc gdi32full!LoadFont+0x76
06aee7dc 761534f3 gdi32full!FindOrCreateFaceCache+0x98
06aee8e0 7615910b gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
06aeed44 761582ef gdi32full!ScriptStringAnalyse+0x92b
06aeeecc 76157b40 gdi32full!LpkCharsetDraw+0x60f
06aeeef8 7586d50d gdi32full!LpkDrawTextEx+0x30
06aeef54 7586d3a4 user32!DT_DrawStr+0x5f
06aeefb4 7586cedb user32!DT_GetLineBreak+0xa2
06aef084 7586ccde user32!DrawTextExWorker+0x1f9
06aef0a0 6c8fe6ca user32!DrawTextExW+0x1e
06aef104 6c8fdd34 uxtheme!CTextDraw::GetTextExtent+0xa4
06aef14c 6c8f43c9 uxtheme!GetThemeTextExtent+0x74
06aef1a0 6c900f87 uxtheme!_GetNcCaptionTextSize+0x61
06aef290 6c90293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
06aef33c 6c9029ef uxtheme!_WindowPosChangedWorker+0x7c
06aef348 6c8ff545 uxtheme!OnOwpPostWindowPosChanged+0x1f
06aef398 75877ed3 uxtheme!ThemePostWndProc+0x355
06aef484 75877aaa user32!UserCallWinProcCheckWow+0x363
06aef4e8 7587f7f7 user32!DispatchClientMessage+0xea
06aef528 77a054ed user32!__fnINLPWINDOWPOS+0x37
06aef578 778b124c ntdll!KiUserCallbackDispatcher+0x4d
06aef57c 6c91d44f win32u!NtUserSetWindowPos+0xc
06aef5a8 6c9000ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
06aef604 75877e7f uxtheme!ThemePreWndProc+0x43f
06aef6f0 758767e1 user32!UserCallWinProcCheckWow+0x30f
06aef76c 75876300 user32!DispatchMessageWorker+0x4d1
06aef778 52cbf5a1 user32!DispatchMessageW+0x10
06aef79c 52cbf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
06aef7fc 52cc196f CfgRelayEx!CConfigCenterStub::Process+0xa7
06aef808 52cdffcb CfgRelayEx!CThread::ThreadProc+0x1f
06aef844 7602fcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
06aef854 779f80ce kernel32!BaseThreadInitThunk+0x19
06aef8b0 779f809e ntdll!__RtlUserThreadStart+0x2f
06aef8c0 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
03a9e0ac 77b18541 ntdll!sxsisol_SearchActCtxForDllName+0x26
03a9e214 77b19f8c ntdll!RtlDosApplyFileIsolationRedirection_Ustr+0x2e1
03a9e278 77b1717e ntdll!LdrpPreprocessDllName+0x27c
03a9e500 77b16462 ntdll!LdrpLoadForwardedDll+0xdd
03a9e59c 77b15fb9 ntdll!LdrpGetDelayloadExportDll+0x82
03a9e838 77b14d54 ntdll!LdrpHandleProtectedDelayload+0x79
03a9e888 757e763d ntdll!LdrResolveDelayLoadedAPI+0x1e4
03a9e8a8 75772973 gdi32full!__delayLoadHelper2+0x28
03a9e9b8 757c296a gdi32full!_tailMerge_textshaping_dll+0xd
03a9e9f8 75784717 gdi32full!ScriptShape+0xda
03a9ea70 7576ad04 gdi32full!RenderItemNoFallback+0x198f7
03a9eaa8 7576aab8 gdi32full!RenderItemWithFallback+0xb4
03a9ead8 7576a98c gdi32full!RenderItem+0x28
03a9eb30 75767866 gdi32full!ScriptStringAnalyzeGlyphs+0x1bc
03a9ec44 75768803 gdi32full!ScriptStringAnalyse+0x7e6
03a9ede0 757666c3 gdi32full!LpkCharsetDraw+0xa93
03a9ee20 7698f1cb gdi32full!LpkDrawTextEx+0x203
03a9ee84 7698f0d1 user32!DT_DrawStr+0x69
03a9eedc 7698ecce user32!DT_GetLineBreak+0xf8
03a9efac 769fcc1e user32!DrawTextExWorker+0x1c4
03a9efc8 7331d236 user32!DrawTextExW+0x1e
03a9f02c 7332321a uxtheme!CTextDraw::GetTextExtent+0x109
03a9f074 73314a1d uxtheme!GetThemeTextExtent+0x8a
03a9f0c8 732e674a uxtheme!_GetNcCaptionTextSize+0x61
03a9f244 732e7a8e uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
03a9f328 732ec1cf uxtheme!_WindowPosChangedWorker+0x73
03a9f334 732e8f86 uxtheme!OnOwpPostWindowPosChanged+0x1f
03a9f398 769842d0 uxtheme!ThemePostWndProc+0x356
03a9f494 76983d2a user32!UserCallWinProcCheckWow+0x4f0
03a9f4f8 769910d7 user32!DispatchClientMessage+0xea
03a9f538 77b48e0d user32!__fnINLPWINDOWPOS+0x37
03a9f588 76b112ac ntdll!KiUserCallbackDispatcher+0x4d
03a9f58c 73312c9f win32u!NtUserSetWindowPos+0xc
03a9f5b8 732ea318 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03a9f63c 76984278 uxtheme!ThemePreWndProc+0x988
03a9f738 76982b65 user32!UserCallWinProcCheckWow+0x498
03a9f7b4 769826b0 user32!DispatchMessageWorker+0x4a5
03a9f7c0 7981f5a1 user32!DispatchMessageW+0x10
03a9f7e4 7981f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03a9f844 7982196f CfgRelayEx!CConfigCenterStub::Process+0xa7
03a9f850 7983ffcb CfgRelayEx!CThread::ThreadProc+0x1f
03a9f88c 771e7ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03a9f89c 77b3be3b kernel32!BaseThreadInitThunk+0x19
03a9f8f4 77b3bdbf ntdll!__RtlUserThreadStart+0x2b
03a9f904 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
03fae4c8 759c22d6 gdi32full!LoadFont+0x15
03fae4ec 759c2af9 gdi32full!FindOrCreateFaceCache+0x98
03fae5f0 759c9eb4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
03fae998 759c82b6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
03faee04 759c73af gdi32full!ScriptStringAnalyse+0xa16
03faefa4 759c6c00 gdi32full!LpkCharsetDraw+0x60f
03faefd0 76d7d36d gdi32full!LpkDrawTextEx+0x30
03faf02c 76d7d204 user32!DT_DrawStr+0x5f
03faf08c 76d7cd3b user32!DT_GetLineBreak+0xa2
03faf15c 76d7cb3e user32!DrawTextExWorker+0x1f9
03faf178 6dace71a user32!DrawTextExW+0x1e
03faf1dc 6dacdd84 uxtheme!CTextDraw::GetTextExtent+0xa4
03faf224 6dac43e9 uxtheme!GetThemeTextExtent+0x74
03faf278 6dad0fc7 uxtheme!_GetNcCaptionTextSize+0x61
03faf36c 6dad297c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
03faf418 6dad2a2f uxtheme!_WindowPosChangedWorker+0x7c
03faf424 6dacf595 uxtheme!OnOwpPostWindowPosChanged+0x1f
03faf474 76d88473 uxtheme!ThemePostWndProc+0x355
03faf55c 76d8804a user32!UserCallWinProcCheckWow+0x363
03faf5c0 76d8f467 user32!DispatchClientMessage+0xea
03faf600 77824fbd user32!__fnINLPWINDOWPOS+0x37
03faf650 75ff124c ntdll!KiUserCallbackDispatcher+0x4d
03faf654 6daed6cf win32u!NtUserSetWindowPos+0xc
03faf680 6dad012f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03faf6dc 76d8841f uxtheme!ThemePreWndProc+0x43f
03faf7c4 76d861ba user32!UserCallWinProcCheckWow+0x30f
03faf838 76d85f80 user32!DispatchMessageWorker+0x22a
03faf844 568af5a1 user32!DispatchMessageW+0x10
03faf868 568af2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03faf8c8 568b196f CfgRelayEx!CConfigCenterStub::Process+0xa7
03faf8d4 568cffcb CfgRelayEx!CThread::ThreadProc+0x1f
03faf910 767d00f9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03faf920 77817bbe kernel32!BaseThreadInitThunk+0x19
03faf97c 77817b8e ntdll!__RtlUserThreadStart+0x2f
03faf98c 00000000 ntdll!_RtlUserThreadStart+0x1b