Crash in cfgrelayex, Analyzed 5 dumps, total processed 305, rate equals 1.64%

Top 1: Version = 2.7224.1000.620, Total count = 5

dump count = 1

043bf4d0 7749f4eb gdi32full!LpkDrawTextEx+0x203
043bf56c 7599c902 user32!DT_DrawStr+0x69
043bf678 71c90174 gdi32!IntersectClipRect+0x22
043bf6dc 71c9616a uxtheme!CTextDraw::GetTextExtent+0x109
043bf724 71c8796d uxtheme!GetThemeTextExtent+0x8a
043bf778 71c5686a uxtheme!_GetNcCaptionTextSize+0x61
043bf8f0 71c57bae uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
043bf9d4 71c5c2df uxtheme!_WindowPosChangedWorker+0x73
043bf9e0 71c59090 uxtheme!OnOwpPostWindowPosChanged+0x1f
043bfa48 774945c0 uxtheme!ThemePostWndProc+0x340
043bfb44 7749401a user32!UserCallWinProcCheckWow+0x4f0
043bfba8 774a13f7 user32!DispatchClientMessage+0xea
043bfbe8 776a919d user32!__fnINLPWINDOWPOS+0x37
043bfc38 76d012ac ntdll!KiUserCallbackDispatcher+0x4d
043bfc3c 71c85bef win32u!NtUserSetWindowPos+0xc
043bfc68 71c5a428 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
043bfd98 776a6bdc uxtheme!ThemePreWndProc+0x988
043bfe20 76d010dc ntdll!ZwCallbackReturn+0xc
043bfe6c 5336f5a1 win32u!NtUserGetMessage+0xc
043bfef0 5337196f CfgRelayEx!WTL::CMessageLoop::Run+0xc1
043bfefc 5338ffcb CfgRelayEx!CThread::ThreadProc+0x1f
043bff38 75ae7ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
043bff48 7769c10b kernel32!BaseThreadInitThunk+0x19
043bffa0 7769c08f ntdll!__RtlUserThreadStart+0x2b
043bffb0 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
050afa34 776ae1b2 ntdll!RtlpLowFragHeapAllocFromContext+0x3d2
050afaa8 776bc949 ntdll!RtlAllocateHeap+0x206
050afbc0 776bc84e ntdll!RtlpReAllocateHeap+0x146
050afc34 03b37248 ntdll!RtlReAllocateHeap+0x2c5
050afc54 03b187f4 CfgRelayEx!_realloc_base+0x63
050afc70 03b18c2e CfgRelayEx!Pickle::operator=+0x64
050afc80 03b132ce CfgRelayEx!IPC::Message::operator=+0xe
050afcdc 03b1320f CfgRelayEx!CChannelImpl::ReceiveThreadImp+0xae
050afce4 03b2ffcb CfgRelayEx!CChannelImpl::ReceiveThread+0xf
050afd20 76e2343d CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
050afd2c 776b9832 kernel32!BaseThreadInitThunk+0xe
050afd6c 776b9805 ntdll!__RtlUserThreadStart+0x70
050afd84 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0495e058 768b85ac gdi32full!pcfLocateCFONT+0x67
0495e3d8 768be9ee gdi32full!GetFontRealizationInfo+0xdc
0495e988 768b35ac gdi32full!LoadFont+0x76
0495e9ac 768b40a3 gdi32full!FindOrCreateFaceCache+0x98
0495eab0 768bb9b4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0495ee58 768b9da6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
0495f2c4 768b8e9f gdi32full!ScriptStringAnalyse+0xa16
0495f474 768b86f0 gdi32full!LpkCharsetDraw+0x60f
0495f4a0 76ffce6d gdi32full!LpkDrawTextEx+0x30
0495f4fc 76ffcd04 user32!DT_DrawStr+0x5f
0495f55c 76ffc83b user32!DT_GetLineBreak+0xa2
0495f62c 76ffc63e user32!DrawTextExWorker+0x1f9
0495f648 6fe6e79a user32!DrawTextExW+0x1e
0495f6ac 6fe6de04 uxtheme!CTextDraw::GetTextExtent+0xa4
0495f6f4 6fe643e9 uxtheme!GetThemeTextExtent+0x74
0495f748 6fe71047 uxtheme!_GetNcCaptionTextSize+0x61
0495f83c 6fe729fc uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0495f8e8 6fe72aaf uxtheme!_WindowPosChangedWorker+0x7c
0495f8f4 6fe6f615 uxtheme!OnOwpPostWindowPosChanged+0x1f
0495f944 77007f23 uxtheme!ThemePostWndProc+0x355
0495fa2c 77007afa user32!UserCallWinProcCheckWow+0x363
0495fa90 7700ef27 user32!DispatchClientMessage+0xea
0495fad0 7773508d user32!__fnINLPWINDOWPOS+0x37
0495fb20 6fe8d7df ntdll!KiUserCallbackDispatcher+0x4d
0495fb4c 6fe701af uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0495fba8 77007ecf uxtheme!ThemePreWndProc+0x43f
0495fc90 77005c6a user32!UserCallWinProcCheckWow+0x30f
0495fd04 77005a30 user32!DispatchMessageWorker+0x22a
0495fd10 7b67f5a1 user32!DispatchMessageW+0x10
0495fd34 7b67f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0495fd94 7b68196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0495fda0 7b69ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0495fddc 7599fcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0495fdec 77727c6e kernel32!BaseThreadInitThunk+0x19
0495fe48 77727c3e ntdll!__RtlUserThreadStart+0x2f
0495fe58 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04ebe1a0 771f1f6f gdi32full!GetFontRealizationInfo+0x1c
04ebe750 771e7e0b gdi32full!LoadFont+0x70
04ebe774 771e7f62 gdi32full!FindOrCreateFaceCache+0xc7
04ebe880 77186ad5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
04ebec28 771874cb gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
04ebed44 77188863 gdi32full!ScriptStringAnalyse+0x3eb
04ebeec0 77186723 gdi32full!LpkCharsetDraw+0xa93
04ebef00 7574f57b gdi32full!LpkDrawTextEx+0x203
04ebef64 7574f481 user32!DT_DrawStr+0x69
04ebefbc 7574f07e user32!DT_GetLineBreak+0xf8
04ebf08c 757bcb2e user32!DrawTextExWorker+0x1c4
04ebf0a8 714c09c4 user32!DrawTextExW+0x1e
04ebf10c 714c69aa uxtheme!CTextDraw::GetTextExtent+0x109
04ebf154 714b81bd uxtheme!GetThemeTextExtent+0x8a
04ebf1a8 7148689a uxtheme!_GetNcCaptionTextSize+0x61
04ebf320 71487bde uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
04ebf404 7148c30f uxtheme!_WindowPosChangedWorker+0x73
04ebf410 714890c0 uxtheme!OnOwpPostWindowPosChanged+0x1f
04ebf478 75744630 uxtheme!ThemePostWndProc+0x340
04ebf574 7574408a user32!UserCallWinProcCheckWow+0x4f0
04ebf5d8 75751487 user32!DispatchClientMessage+0xea
04ebf618 772e91bd user32!__fnINLPWINDOWPOS+0x37
04ebf668 76e412ac ntdll!KiUserCallbackDispatcher+0x4d
04ebf66c 714b643f win32u!NtUserSetWindowPos+0xc
04ebf698 7148a458 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04ebf718 757445d8 uxtheme!ThemePreWndProc+0x988
04ebf814 75742ec5 user32!UserCallWinProcCheckWow+0x498
04ebf890 75742a10 user32!DispatchMessageWorker+0x4a5
04ebf89c 77ebf5a1 user32!DispatchMessageW+0x10
04ebf8c0 77ebf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04ebf920 77ec196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04ebf92c 77edffcb CfgRelayEx!CThread::ThreadProc+0x1f
04ebf968 76c57ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04ebf978 772dc11b kernel32!BaseThreadInitThunk+0x19
04ebf9d0 772dc09f ntdll!__RtlUserThreadStart+0x2b
04ebf9e0 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
042fe258 77180504 gdi32full!GetFontRealizationInfo+0x15
042fe808 77181066 gdi32full!LoadFont+0x76
042fe82c 771815f0 gdi32full!FindOrCreateFaceCache+0x98
042fe930 77188164 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
042fecd8 77186566 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
042ff144 7718565f gdi32full!ScriptStringAnalyse+0xa16
042ff2dc 77184eb0 gdi32full!LpkCharsetDraw+0x60f
042ff308 757aa6dd gdi32full!LpkDrawTextEx+0x30
042ff364 757aa574 user32!DT_DrawStr+0x5f
042ff3c4 757aa0ab user32!DT_GetLineBreak+0xa2
042ff494 757a9eae user32!DrawTextExWorker+0x1f9
042ff4b0 66fee8ba user32!DrawTextExW+0x1e
042ff514 66fedf54 uxtheme!CTextDraw::GetTextExtent+0xa4
042ff55c 66fe4429 uxtheme!GetThemeTextExtent+0x74
042ff5b0 66ff1167 uxtheme!_GetNcCaptionTextSize+0x61
042ff6a4 66ff2b1c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
042ff750 66ff2bcf uxtheme!_WindowPosChangedWorker+0x7c
042ff75c 66fef735 uxtheme!OnOwpPostWindowPosChanged+0x1f
042ff7ac 757b5203 uxtheme!ThemePostWndProc+0x355
042ff894 757b4dda user32!UserCallWinProcCheckWow+0x363
042ff8f8 757bc267 user32!DispatchClientMessage+0xea
042ff938 7750338d user32!__fnINLPWINDOWPOS+0x37
042ff988 76e8124c ntdll!KiUserCallbackDispatcher+0x4d
042ff98c 6700d7bf win32u!NtUserSetWindowPos+0xc
042ff9b8 66ff02cf uxtheme!OnOwpPreDwmCompositionChanged+0x4f
042ffa14 757b51af uxtheme!ThemePreWndProc+0x43f
042ffafc 757b350a user32!UserCallWinProcCheckWow+0x30f
042ffb70 757b32d0 user32!DispatchMessageWorker+0x22a
042ffb7c 7c01f5a1 user32!DispatchMessageW+0x10
042ffba0 7c01f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
042ffc00 7c02196f CfgRelayEx!CConfigCenterStub::Process+0xa7
042ffc0c 7c03ffcb CfgRelayEx!CThread::ThreadProc+0x1f
042ffc48 76bcf989 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
042ffc58 774f5de4 kernel32!BaseThreadInitThunk+0x19
042ffcb4 774f5db4 ntdll!__RtlUserThreadStart+0x2f
042ffcc4 00000000 ntdll!_RtlUserThreadStart+0x1b