Crash in cfgrelayex, Analyzed 3 dumps, total processed 158, rate equals 1.90%

Top 1: Version = 2.7224.1000.620, Total count = 3

dump count = 1

ChildEBP RetAddr  
05a7fbbc 5b49d625 CfgRelayEx!std::_Tree<std::_Tmap_traits<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::shared_ptr<CClient>,std::less<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > >,std::allocator<std::pair<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > const ,std::shared_ptr<CClient> > >,0> >::_Lbound<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > >+0x22
05a7fbd0 5b49d4f9 CfgRelayEx!std::_Tree<std::_Tmap_traits<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::shared_ptr<CClient>,std::less<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > >,std::allocator<std::pair<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > const ,std::shared_ptr<CClient> > >,0> >::lower_bound+0x25
05a7fbfc 5b49ac5e CfgRelayEx!std::_Tree<std::_Tmap_traits<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::shared_ptr<CClient>,std::less<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > >,std::allocator<std::pair<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > const ,std::shared_ptr<CClient> > >,0> >::find+0x19
05a7fc38 5b49b560 CfgRelayEx!CContainer<ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::shared_ptr<CClient> >::Get+0x4e
05a7fcc4 5b49b472 CfgRelayEx!CClientMgr::OnSlowCfgRefresh+0xe0
05a7fcdc 5b4a3390 CfgRelayEx!CClientMgr::OnReceiveMessage+0x42
05a7fd38 5b4a320f CfgRelayEx!CChannelImpl::ReceiveThreadImp+0x170
05a7fd40 5b4bffcb CfgRelayEx!CChannelImpl::ReceiveThread+0xf
05a7fd7c 769c347d CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
05a7fd88 77619762 kernel32!BaseThreadInitThunk+0xe
05a7fdc8 77619735 ntdll!__RtlUserThreadStart+0x70
05a7fde0 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0521e030 77646569 ntdll!LdrpGetDelayloadExportDll+0x16
0521e2cc 77645304 ntdll!LdrpHandleProtectedDelayload+0x79
0521e31c 76208dbd ntdll!LdrResolveDelayLoadedAPI+0x1e4
0521e33c 76194cc3 gdi32full!__delayLoadHelper2+0x28
0521e468 761f43df gdi32full!_tailMerge_textshaping_dll+0xd
0521ea10 761e9ceb gdi32full!LoadFont+0x5d0
0521ea34 761e9e42 gdi32full!FindOrCreateFaceCache+0xc7
0521eb40 76188ae5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
0521eee8 761894db gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
0521f004 7618a873 gdi32full!ScriptStringAnalyse+0x3eb
0521f180 76188733 gdi32full!LpkCharsetDraw+0xa93
0521f1c0 7635f1ab gdi32full!LpkDrawTextEx+0x203
0521f224 7635efa2 user32!DT_DrawStr+0x69
0521f254 7635ecee user32!DT_DrawJustifiedLine+0x35
0521f324 763cc8fe user32!DrawTextExWorker+0x204
0521f340 72890fc4 user32!DrawTextExW+0x1e
0521f3a4 72896fba uxtheme!CTextDraw::GetTextExtent+0x109
0521f3ec 728887ad uxtheme!GetThemeTextExtent+0x8a
0521f440 728568ba uxtheme!_GetNcCaptionTextSize+0x61
0521f5b8 72857bfe uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
0521f69c 7285c32f uxtheme!_WindowPosChangedWorker+0x73
0521f6a8 728590e0 uxtheme!OnOwpPostWindowPosChanged+0x1f
0521f710 76354260 uxtheme!ThemePostWndProc+0x340
0521f80c 76353cba user32!UserCallWinProcCheckWow+0x4f0
0521f870 763610b7 user32!DispatchClientMessage+0xea
0521f8b0 7767916d user32!__fnINLPWINDOWPOS+0x37
0521f900 753712ac ntdll!KiUserCallbackDispatcher+0x4d
0521f904 72886a2f win32u!NtUserSetWindowPos+0xc
0521f930 7285a478 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0521f9b4 76354208 uxtheme!ThemePreWndProc+0x988
0521fab0 76352ae5 user32!UserCallWinProcCheckWow+0x498
0521fb2c 76352630 user32!DispatchMessageWorker+0x4a5
0521fb38 7a71f5a1 user32!DispatchMessageW+0x10
0521fb5c 7a71f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0521fbbc 7a72196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0521fbc8 7a73ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0521fc04 76697ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0521fc14 7766c0cb kernel32!BaseThreadInitThunk+0x19
0521fc6c 7766c04f ntdll!__RtlUserThreadStart+0x2b
0521fc7c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04ebe1a0 771f1f6f gdi32full!GetFontRealizationInfo+0x1c
04ebe750 771e7e0b gdi32full!LoadFont+0x70
04ebe774 771e7f62 gdi32full!FindOrCreateFaceCache+0xc7
04ebe880 77186ad5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
04ebec28 771874cb gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
04ebed44 77188863 gdi32full!ScriptStringAnalyse+0x3eb
04ebeec0 77186723 gdi32full!LpkCharsetDraw+0xa93
04ebef00 7574f57b gdi32full!LpkDrawTextEx+0x203
04ebef64 7574f481 user32!DT_DrawStr+0x69
04ebefbc 7574f07e user32!DT_GetLineBreak+0xf8
04ebf08c 757bcb2e user32!DrawTextExWorker+0x1c4
04ebf0a8 714c09c4 user32!DrawTextExW+0x1e
04ebf10c 714c69aa uxtheme!CTextDraw::GetTextExtent+0x109
04ebf154 714b81bd uxtheme!GetThemeTextExtent+0x8a
04ebf1a8 7148689a uxtheme!_GetNcCaptionTextSize+0x61
04ebf320 71487bde uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
04ebf404 7148c30f uxtheme!_WindowPosChangedWorker+0x73
04ebf410 714890c0 uxtheme!OnOwpPostWindowPosChanged+0x1f
04ebf478 75744630 uxtheme!ThemePostWndProc+0x340
04ebf574 7574408a user32!UserCallWinProcCheckWow+0x4f0
04ebf5d8 75751487 user32!DispatchClientMessage+0xea
04ebf618 772e91bd user32!__fnINLPWINDOWPOS+0x37
04ebf668 76e412ac ntdll!KiUserCallbackDispatcher+0x4d
04ebf66c 714b643f win32u!NtUserSetWindowPos+0xc
04ebf698 7148a458 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04ebf718 757445d8 uxtheme!ThemePreWndProc+0x988
04ebf814 75742ec5 user32!UserCallWinProcCheckWow+0x498
04ebf890 75742a10 user32!DispatchMessageWorker+0x4a5
04ebf89c 77ebf5a1 user32!DispatchMessageW+0x10
04ebf8c0 77ebf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04ebf920 77ec196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04ebf92c 77edffcb CfgRelayEx!CThread::ThreadProc+0x1f
04ebf968 76c57ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04ebf978 772dc11b kernel32!BaseThreadInitThunk+0x19
04ebf9d0 772dc09f ntdll!__RtlUserThreadStart+0x2b
04ebf9e0 00000000 ntdll!_RtlUserThreadStart+0x1b