Crash in base, Analyzed 4 dumps, total processed 281, rate equals 1.42%

Top 1: Version = 2.5024.1300.126, Total count = 4

dump count = 1

0757e37c 0f5f5fb4 0x757e394
0757e394 0f5c0374 base!_TI2?AVbad_allocstd
0757e398 00000000 base!`string'

dump count = 1

051ffbe0 053baa06 kernel32!HeapFree+0x14
051ffbf4 0527a652 base!_free_base+0x1c
051ffc00 05286b0e base!l_alloc+0x12
051ffc24 0528da7d base!luaM_realloc_+0x1e
051ffc44 0528369a base!luaH_free+0x2d
051ffc68 05282731 base!sweeplist+0xca
051ffc98 0528b36a base!luaC_freeall+0x21
051ffcb4 0528b564 base!close_state+0x1a
051ffcc4 0526dacb base!lua_close+0x54
051ffce8 0f87faf2 base!CLuaExplain::Release+0x3b
051ffe38 0f87f89b utility!CWorkThread::_ThreadProc+0x242
051ffe40 765d343d utility!CWorkThread::_StaticThreadProc+0xb
051ffe4c 77739832 kernel32!BaseThreadInitThunk+0xe
051ffe8c 77739805 ntdll!__RtlUserThreadStart+0x70
051ffea4 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

035ae8c4 0393d9c5 urlmon!URLDownloadToCacheFileW+0x108
035aed20 0393b5ca base!CStatisticImpl::InternalDownloadFile+0xa5
035aedd0 0393e82c base!CStatisticImpl::DownloadFile+0x20a
035aee2c 0393e6fc base!CStatisticImpl::SendStatUrl+0xbc
035aeea0 039394fd base!CStatisticImpl::SendStat+0x78c
035aeeec 0381cfde base!CDataStatistic::SendStat+0x2d
035aefc4 03831359 base!CLuaAppHelp::SendStatUrl+0x23e
035aefdc 0384133d base!luaD_precall+0x239
035af0ec 03830e1c base!luaV_execute+0xfbd
035af100 03828fd3 base!luaD_call+0x4c
035af114 038314d2 base!f_call+0x13
035af180 03830faa base!luaD_rawrunprotected+0x52
035af1ac 03829923 base!luaD_pcall+0x3a
035af1dc 0381db45 base!lua_pcall+0x53
035af1fc 0fdda500 base!CLuaExplain::Run+0x55
035af78c 0fddb63e utility!CConfigMgr::RunLuaScriptByLuaThread+0x230
035af7ac 0fdffaf2 utility!std::_Func_impl_no_alloc<std::_Binder<std::_Unforced,void (__thiscall CConfigMgr::*)(ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,void *),CConfigMgr *,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > &,void * &>,void>::_Do_call+0x2e
035af8fc 0fdff89b utility!CWorkThread::_ThreadProc+0x242
035af904 7725343d utility!CWorkThread::_StaticThreadProc+0xb
035af910 77e39802 kernel32!BaseThreadInitThunk+0xe
035af950 77e397d5 ntdll!__RtlUserThreadStart+0x70
035af968 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
07f1e904 6ba71dcd base!_chkstk+0x29
07f1ec60 6ba63db9 base!CBrowserChrome::GetHistoryInfo+0x82d
07f1ed64 6ba637fc base!IBrowser::FindHistory+0x119
07f1efb4 6ba5f821 base!FindBrowserHistory+0x42c
07f1f018 6bab27f1 base!CBrowserData::FindBrowserHistory+0x81
07f1f034 6bad11e9 base!CLuaAppHelp::GetLocalBrowserHistory+0x71
07f1f04c 6bae11bd base!luaD_precall+0x239
07f1f15c 6bad0cac base!luaV_execute+0xfbd
07f1f170 6bac8e83 base!luaD_call+0x4c
07f1f184 6bad1362 base!f_call+0x13
07f1f1f0 6bad0e3a base!luaD_rawrunprotected+0x52
07f1f21c 6bac97d3 base!luaD_pcall+0x3a
07f1f24c 6babddf5 base!lua_pcall+0x53
07f1f26c 6b529a40 base!CLuaExplain::Run+0x55
07f1f7fc 6b52ab7e utility!CConfigMgr::RunLuaScriptByLuaThread+0x230
07f1f81c 6b54efd2 utility!std::_Func_impl_no_alloc<std::_Binder<std::_Unforced,void (__thiscall CConfigMgr::*)(ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,void *),CConfigMgr *,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > &,void * &>,void>::_Do_call+0x2e
07f1f96c 6b54ed7b utility!CWorkThread::_ThreadProc+0x242
07f1f974 7578343d utility!CWorkThread::_StaticThreadProc+0xb
07f1f980 77ce9812 kernel32!BaseThreadInitThunk+0xe
07f1f9c0 77ce97e5 ntdll!__RtlUserThreadStart+0x70
07f1f9d8 00000000 ntdll!_RtlUserThreadStart+0x1b