Crash in textshaping, Analyzed 2 dumps, total processed 168, rate equals 1.19%

Top 1: Version = v1.7224.1005.626, Total count = 2

dump count = 1

ChildEBP RetAddr  
053ae194 6f642531 TextShaping!ApplyFeatures+0x32
053ae218 6f62ed1d TextShaping!SubstituteOtlGlyphs+0x181
053ae240 6f62ae8b TextShaping!ShapingLibraryInternal::SubstituteOtlGlyphsWithFallback+0x1d
053ae4dc 6f61d716 TextShaping!GenericEngineGetGlyphs+0x79b
053ae5a8 772add26 TextShaping!ShapingGetGlyphs+0x356
053ae6dc 772ad1e8 gdi32full!ShlShapeOT+0x1c6
053ae730 772ac6e9 gdi32full!ScriptShape+0x148
053ae7a8 772abe19 gdi32full!RenderItemNoFallback+0x5f9
053ae7e0 772abcd8 gdi32full!RenderItemWithFallback+0x119
053ae808 772aba5e gdi32full!RenderItem+0x28
053ae860 772a8e18 gdi32full!ScriptStringAnalyzeGlyphs+0x1be
053aecc4 772a81ef gdi32full!ScriptStringAnalyse+0x738
053aee6c 772a7a40 gdi32full!LpkCharsetDraw+0x60f
053aee98 757bd3cd gdi32full!LpkDrawTextEx+0x30
053aeef4 757bd264 user32!DT_DrawStr+0x5f
053aef54 757bcd9b user32!DT_GetLineBreak+0xa2
053af024 757bcb9e user32!DrawTextExWorker+0x1f9
053af040 6ff0e6ca user32!DrawTextExW+0x1e
053af0a4 6ff0dd34 uxtheme!CTextDraw::GetTextExtent+0xa4
053af0ec 6ff043c9 uxtheme!GetThemeTextExtent+0x74
053af140 6ff10f87 uxtheme!_GetNcCaptionTextSize+0x61
053af230 6ff1293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
053af2dc 6ff129ef uxtheme!_WindowPosChangedWorker+0x7c
053af2e8 6ff0f545 uxtheme!OnOwpPostWindowPosChanged+0x1f
053af338 757c7d93 uxtheme!ThemePostWndProc+0x355
053af424 757c796a user32!UserCallWinProcCheckWow+0x363
053af488 757cf6b7 user32!DispatchClientMessage+0xea
053af4c8 778c54bd user32!__fnINLPWINDOWPOS+0x37
053af518 76d2124c ntdll!KiUserCallbackDispatcher+0x4d
053af51c 6ff2d44f win32u!NtUserSetWindowPos+0xc
053af548 6ff100ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
053af5a4 757c7d3f uxtheme!ThemePreWndProc+0x43f
053af690 757c66a1 user32!UserCallWinProcCheckWow+0x30f
053af70c 757c61c0 user32!DispatchMessageWorker+0x4d1
053af718 52520bc1 user32!DispatchMessageW+0x10
053af73c 52520a7b AcMgr!WTL::CMessageLoop::Run+0xc1
053af798 5252477f AcMgr!CPopMgrTrayClient::Process+0x8b
053af7a4 525d3f20 AcMgr!CThread::ThreadProc+0x1f
053af7e0 75c1fcc9 AcMgr!thread_start<unsigned int (__stdcall*)(void *)>+0x57
053af7f0 778b809e kernel32!BaseThreadInitThunk+0x19
053af84c 778b806e ntdll!__RtlUserThreadStart+0x2f
053af85c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
03eae004 50bc5865 TextShaping!GetScriptFeatureLookupLists+0xb
03eae214 50bc18a1 TextShaping!ApplyFeatures+0xb5
03eae298 50bae16d TextShaping!SubstituteOtlGlyphs+0x181
03eae2c0 50baa2db TextShaping!ShapingLibraryInternal::SubstituteOtlGlyphsWithFallback+0x1d
03eae55c 50b9cb96 TextShaping!GenericEngineGetGlyphs+0x79b
03eae628 75f5c426 TextShaping!ShapingGetGlyphs+0x356
03eae75c 75f5b8e8 gdi32full!ShlShapeOT+0x1c6
03eae7b0 75f5ade9 gdi32full!ScriptShape+0x148
03eae828 75f5a519 gdi32full!RenderItemNoFallback+0x5f9
03eae860 75f5a3d8 gdi32full!RenderItemWithFallback+0x119
03eae888 75f5a15e gdi32full!RenderItem+0x28
03eae8e0 75f57518 gdi32full!ScriptStringAnalyzeGlyphs+0x1be
03eaed44 75f568ef gdi32full!ScriptStringAnalyse+0x738
03eaeecc 75f56140 gdi32full!LpkCharsetDraw+0x60f
03eaeef8 7649adfd gdi32full!LpkDrawTextEx+0x30
03eaef54 7649ac94 user32!DT_DrawStr+0x5f
03eaefb4 7649a7cb user32!DT_GetLineBreak+0xa2
03eaf084 7649a5ce user32!DrawTextExWorker+0x1f9
03eaf0a0 6c71e6ea user32!DrawTextExW+0x1e
03eaf104 6c71dd84 uxtheme!CTextDraw::GetTextExtent+0xa4
03eaf14c 6c714349 uxtheme!GetThemeTextExtent+0x74
03eaf1a0 6c720fa7 uxtheme!_GetNcCaptionTextSize+0x61
03eaf294 6c72295c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
03eaf340 6c722a0f uxtheme!_WindowPosChangedWorker+0x7c
03eaf34c 6c71f565 uxtheme!OnOwpPostWindowPosChanged+0x1f
03eaf39c 764a5ea3 uxtheme!ThemePostWndProc+0x355
03eaf484 764a5a7a user32!UserCallWinProcCheckWow+0x363
03eaf4e8 764ace97 user32!DispatchClientMessage+0xea
03eaf528 77c64e7d user32!__fnINLPWINDOWPOS+0x37
03eaf578 77bc124c ntdll!KiUserCallbackDispatcher+0x4d
03eaf57c 6c73d4af win32u!NtUserSetWindowPos+0xc
03eaf5a8 6c72010f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03eaf604 764a5e4f uxtheme!ThemePreWndProc+0x43f
03eaf6ec 764a3bea user32!UserCallWinProcCheckWow+0x30f
03eaf760 764a39b0 user32!DispatchMessageWorker+0x22a
03eaf76c 78dcf5a1 user32!DispatchMessageW+0x10
03eaf790 78dcf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03eaf7f0 78dd196f CfgRelayEx!CConfigCenterStub::Process+0xa7
03eaf7fc 78deffcb CfgRelayEx!CThread::ThreadProc+0x1f
03eaf838 7794fa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03eaf848 77c57a7e kernel32!BaseThreadInitThunk+0x19
03eaf8a4 77c57a4e ntdll!__RtlUserThreadStart+0x2f
03eaf8b4 00000000 ntdll!_RtlUserThreadStart+0x1b