Crash in cfgrelayex, Analyzed 3 dumps, total processed 287, rate equals 1.05%

Top 1: Version = 2.7224.1000.620, Total count = 3

dump count = 1

ChildEBP RetAddr  
0445fc10 7649630a CfgRelayEx!LOGW+0x1ea
0445fc3c 76496d4a user32!InternalCallWinProc+0x23
0445fcb4 76496df8 user32!UserCallWinProcCheckWow+0x109
0445fd10 764df9bf user32!DispatchClientMessage+0xd5
0445fd50 776d010a user32!__fnCOPYDATA+0x47
0445fdc4 6432f55b ntdll!KiUserCallbackDispatcher+0x2e
0445fdf4 6432f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0x7b
0445fe54 6433196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0445fe60 6434ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0445fe9c 74d43d12 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0445fea8 776f9732 kernel32!BaseThreadInitThunk+0xe
0445fee8 776f9705 ntdll!__RtlUserThreadStart+0x70
0445ff00 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04cbe340 76f42f1a gdi32full!GetFontRealizationInfo+0x15
04cbe370 76f42c9e gdi32full!GdiRealizationInfo+0x2a
04cbe42c 76f41fef gdi32full!GetFaceAndSizeMetrics+0x5e
04cbe530 76f493f4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x35
04cbe8d8 76f477f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
04cbed44 76f468ef gdi32full!ScriptStringAnalyse+0xa16
04cbeebc 76f46d18 gdi32full!LpkCharsetDraw+0x60f
04cbef88 76f4e6b2 gdi32full!GetTextMetricsW+0x108
04cbefbc 76c9a7cb gdi32full!IntersectClipRectImpl+0x42
04cbf08c 76c9a5ce user32!DrawTextExWorker+0x1f9
04cbf0a8 67abe6ea user32!DrawTextExW+0x1e
04cbf10c 67abdd84 uxtheme!CTextDraw::GetTextExtent+0xa4
04cbf154 67ab4349 uxtheme!GetThemeTextExtent+0x74
04cbf1a8 67ac0fa7 uxtheme!_GetNcCaptionTextSize+0x61
04cbf29c 67ac295c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
04cbf348 67ac2a0f uxtheme!_WindowPosChangedWorker+0x7c
04cbf354 67abf565 uxtheme!OnOwpPostWindowPosChanged+0x1f
04cbf3a4 76ca5ea3 uxtheme!ThemePostWndProc+0x355
04cbf48c 76ca5a7a user32!UserCallWinProcCheckWow+0x363
04cbf4f0 76cace97 user32!DispatchClientMessage+0xea
04cbf530 773d4e9d user32!__fnINLPWINDOWPOS+0x37
04cbf580 7697124c ntdll!KiUserCallbackDispatcher+0x4d
04cbf584 67add4af win32u!NtUserSetWindowPos+0xc
04cbf5b0 67ac010f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04cbf60c 76ca5e4f uxtheme!ThemePreWndProc+0x43f
04cbf6f4 76ca3bea user32!UserCallWinProcCheckWow+0x30f
04cbf768 76ca39b0 user32!DispatchMessageWorker+0x22a
04cbf774 506cf5a1 user32!DispatchMessageW+0x10
04cbf798 506cf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04cbf7f8 506d196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04cbf804 506effcb CfgRelayEx!CThread::ThreadProc+0x1f
04cbf840 7575fa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04cbf850 773c7a9e kernel32!BaseThreadInitThunk+0x19
04cbf8ac 773c7a6e ntdll!__RtlUserThreadStart+0x2f
04cbf8bc 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04ebe1a0 771f1f6f gdi32full!GetFontRealizationInfo+0x1c
04ebe750 771e7e0b gdi32full!LoadFont+0x70
04ebe774 771e7f62 gdi32full!FindOrCreateFaceCache+0xc7
04ebe880 77186ad5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
04ebec28 771874cb gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
04ebed44 77188863 gdi32full!ScriptStringAnalyse+0x3eb
04ebeec0 77186723 gdi32full!LpkCharsetDraw+0xa93
04ebef00 7574f57b gdi32full!LpkDrawTextEx+0x203
04ebef64 7574f481 user32!DT_DrawStr+0x69
04ebefbc 7574f07e user32!DT_GetLineBreak+0xf8
04ebf08c 757bcb2e user32!DrawTextExWorker+0x1c4
04ebf0a8 714c09c4 user32!DrawTextExW+0x1e
04ebf10c 714c69aa uxtheme!CTextDraw::GetTextExtent+0x109
04ebf154 714b81bd uxtheme!GetThemeTextExtent+0x8a
04ebf1a8 7148689a uxtheme!_GetNcCaptionTextSize+0x61
04ebf320 71487bde uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
04ebf404 7148c30f uxtheme!_WindowPosChangedWorker+0x73
04ebf410 714890c0 uxtheme!OnOwpPostWindowPosChanged+0x1f
04ebf478 75744630 uxtheme!ThemePostWndProc+0x340
04ebf574 7574408a user32!UserCallWinProcCheckWow+0x4f0
04ebf5d8 75751487 user32!DispatchClientMessage+0xea
04ebf618 772e91bd user32!__fnINLPWINDOWPOS+0x37
04ebf668 76e412ac ntdll!KiUserCallbackDispatcher+0x4d
04ebf66c 714b643f win32u!NtUserSetWindowPos+0xc
04ebf698 7148a458 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04ebf718 757445d8 uxtheme!ThemePreWndProc+0x988
04ebf814 75742ec5 user32!UserCallWinProcCheckWow+0x498
04ebf890 75742a10 user32!DispatchMessageWorker+0x4a5
04ebf89c 77ebf5a1 user32!DispatchMessageW+0x10
04ebf8c0 77ebf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04ebf920 77ec196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04ebf92c 77edffcb CfgRelayEx!CThread::ThreadProc+0x1f
04ebf968 76c57ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04ebf978 772dc11b kernel32!BaseThreadInitThunk+0x19
04ebf9d0 772dc09f ntdll!__RtlUserThreadStart+0x2b
04ebf9e0 00000000 ntdll!_RtlUserThreadStart+0x1b