Crash in cfgrelayex, Analyzed 4 dumps, total processed 265, rate equals 1.51%

Top 1: Version = 2.7224.1000.620, Total count = 4

dump count = 1

ChildEBP RetAddr  
0521e060 75a85d29 gdi32full!pcfLocateCFONT+0x6d
0521e3e0 75af1f6f gdi32full!GetFontRealizationInfo+0x109
0521e990 75ae7e0b gdi32full!LoadFont+0x70
0521e9b4 75ae7f62 gdi32full!FindOrCreateFaceCache+0xc7
0521eac0 75a86ad5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
0521ee68 75a874cb gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
0521ef84 75a88863 gdi32full!ScriptStringAnalyse+0x3eb
0521f128 75a86723 gdi32full!LpkCharsetDraw+0xa93
0521f168 74f6f57b gdi32full!LpkDrawTextEx+0x203
0521f1cc 74f6f481 user32!DT_DrawStr+0x69
0521f224 74f6f07e user32!DT_GetLineBreak+0xf8
0521f2f4 74fdcb2e user32!DrawTextExWorker+0x1c4
0521f310 66c809c4 user32!DrawTextExW+0x1e
0521f374 66c869aa uxtheme!CTextDraw::GetTextExtent+0x109
0521f3bc 66c781bd uxtheme!GetThemeTextExtent+0x8a
0521f410 66c4689a uxtheme!_GetNcCaptionTextSize+0x61
0521f588 66c47bde uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
0521f66c 66c4c30f uxtheme!_WindowPosChangedWorker+0x73
0521f678 66c490c0 uxtheme!OnOwpPostWindowPosChanged+0x1f
0521f6e0 74f64630 uxtheme!ThemePostWndProc+0x340
0521f7dc 74f6408a user32!UserCallWinProcCheckWow+0x4f0
0521f840 74f71487 user32!DispatchClientMessage+0xea
0521f880 76fb91bd user32!__fnINLPWINDOWPOS+0x37
0521f8d0 74df12ac ntdll!KiUserCallbackDispatcher+0x4d
0521f8d4 66c7643f win32u!NtUserSetWindowPos+0xc
0521f900 66c4a458 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0521f984 74f645d8 uxtheme!ThemePreWndProc+0x988
0521fa80 74f62ec5 user32!UserCallWinProcCheckWow+0x498
0521fafc 74f62a10 user32!DispatchMessageWorker+0x4a5
0521fb08 797ff5a1 user32!DispatchMessageW+0x10
0521fb2c 797ff2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0521fb8c 7980196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0521fb98 7981ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0521fbd4 76737ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0521fbe4 76fac11b kernel32!BaseThreadInitThunk+0x19
0521fc3c 76fac09f ntdll!__RtlUserThreadStart+0x2b
0521fc4c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0357fba4 60d8345d ntdll!RtlInitUnicodeString+0x1b
0357fbec 60d83c0f CfgRelayEx!CChannelImpl::Run+0x3d
0357fbf4 60d9ffcb CfgRelayEx!CChannelImpl::ThreadImpl+0xf
0357fc30 7502343d CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0357fc3c 77399802 kernel32!BaseThreadInitThunk+0xe
0357fc7c 773997d5 ntdll!__RtlUserThreadStart+0x70
0357fc94 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04f8e0a0 77831f6f gdi32full!GetFontRealizationInfo+0x1c
04f8e650 77827e0b gdi32full!LoadFont+0x70
04f8e674 77827f62 gdi32full!FindOrCreateFaceCache+0xc7
04f8e780 777c6ad5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
04f8eb28 777c74cb gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
04f8ec44 777c8863 gdi32full!ScriptStringAnalyse+0x3eb
04f8edbc 777c5ba0 gdi32full!LpkCharsetDraw+0xa93
04f8eea4 757ac902 gdi32full!GetTextMetricsW+0x180
04f8efb0 701409c4 gdi32!IntersectClipRect+0x22
04f8f014 701469aa uxtheme!CTextDraw::GetTextExtent+0x109
04f8f05c 701381bd uxtheme!GetThemeTextExtent+0x8a
04f8f0b0 7010689a uxtheme!_GetNcCaptionTextSize+0x61
04f8f228 70107bde uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
04f8f30c 7010c30f uxtheme!_WindowPosChangedWorker+0x73
04f8f318 701090c0 uxtheme!OnOwpPostWindowPosChanged+0x1f
04f8f380 76c04630 uxtheme!ThemePostWndProc+0x340
04f8f47c 76c0408a user32!UserCallWinProcCheckWow+0x4f0
04f8f4e0 76c11487 user32!DispatchClientMessage+0xea
04f8f520 779191bd user32!__fnINLPWINDOWPOS+0x37
04f8f570 776712ac ntdll!KiUserCallbackDispatcher+0x4d
04f8f574 7013643f win32u!NtUserSetWindowPos+0xc
04f8f5a0 7010a458 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04f8f620 76c045d8 uxtheme!ThemePreWndProc+0x988
04f8f71c 76c02ec5 user32!UserCallWinProcCheckWow+0x498
04f8f798 76c02a10 user32!DispatchMessageWorker+0x4a5
04f8f7a4 79fdf5a1 user32!DispatchMessageW+0x10
04f8f7c8 79fdf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04f8f828 79fe196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04f8f834 79ffffcb CfgRelayEx!CThread::ThreadProc+0x1f
04f8f870 756c7ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04f8f880 7790c11b kernel32!BaseThreadInitThunk+0x19
04f8f8d8 7790c09f ntdll!__RtlUserThreadStart+0x2b
04f8f8e8 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0627fa98 75d0e2da 0x11000
0627fad8 771c4e9d user32!__fnCOPYDATA+0x4a
0627fb30 7690106c ntdll!KiUserCallbackDispatcher+0x4d
0627fb34 75d1db5e win32u!NtUserGetMessage+0xc
0627fb70 554bf55b user32!GetMessageW+0x2e
0627fba0 554bf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0x7b
0627fc00 554c196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0627fc0c 554dffcb CfgRelayEx!CThread::ThreadProc+0x1f
0627fc48 751bfa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0627fc58 771b7a9e kernel32!BaseThreadInitThunk+0x19
0627fcb4 771b7a6e ntdll!__RtlUserThreadStart+0x2f
0627fcc4 00000000 ntdll!_RtlUserThreadStart+0x1b