Crash in cfgrelayex, Analyzed 7 dumps, total processed 232, rate equals 3.02%

Top 1: Version = 2.7224.1000.620, Total count = 7

dump count = 1

ChildEBP RetAddr  
04f0e040 768679fc gdi32full!pcfLocateCFONT+0x8
04f0e3c0 7686412a gdi32full!GetFontRealizationInfo+0xdc
04f0e3f0 768631f8 gdi32full!GdiRealizationInfo+0x2a
04f0e4ac 768634a9 gdi32full!GetFaceAndSizeMetrics+0x5e
04f0e5b0 7686adf4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x35
04f0e958 768691f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
04f0edc4 768682ef gdi32full!ScriptStringAnalyse+0xa16
04f0ef5c 76867b40 gdi32full!LpkCharsetDraw+0x60f
04f0ef88 76ead5cd gdi32full!LpkDrawTextEx+0x30
04f0efe4 76ead464 user32!DT_DrawStr+0x5f
04f0f044 76eacf9b user32!DT_GetLineBreak+0xa2
04f0f114 76eacd9e user32!DrawTextExWorker+0x1f9
04f0f130 6427e6ca user32!DrawTextExW+0x1e
04f0f194 6427dd34 uxtheme!CTextDraw::GetTextExtent+0xa4
04f0f1dc 642743c9 uxtheme!GetThemeTextExtent+0x74
04f0f230 64280f87 uxtheme!_GetNcCaptionTextSize+0x61
04f0f320 6428293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
04f0f3cc 642829ef uxtheme!_WindowPosChangedWorker+0x7c
04f0f3d8 6427f545 uxtheme!OnOwpPostWindowPosChanged+0x1f
04f0f428 76eb7f93 uxtheme!ThemePostWndProc+0x355
04f0f514 76eb7b6a user32!UserCallWinProcCheckWow+0x363
04f0f578 76ebf8d7 user32!DispatchClientMessage+0xea
04f0f5b8 77c254ed user32!__fnINLPWINDOWPOS+0x37
04f0f608 75eb124c ntdll!KiUserCallbackDispatcher+0x4d
04f0f60c 6429d44f win32u!NtUserSetWindowPos+0xc
04f0f638 642800ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04f0f694 76eb7f3f uxtheme!ThemePreWndProc+0x43f
04f0f780 76eb68a1 user32!UserCallWinProcCheckWow+0x30f
04f0f7fc 76eb63c0 user32!DispatchMessageWorker+0x4d1
04f0f808 79dbf5a1 user32!DispatchMessageW+0x10
04f0f82c 79dbf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04f0f88c 79dc196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04f0f898 79ddffcb CfgRelayEx!CThread::ThreadProc+0x1f
04f0f8d4 76bffcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04f0f8e4 77c180ce kernel32!BaseThreadInitThunk+0x19
04f0f940 77c1809e ntdll!__RtlUserThreadStart+0x2f
04f0f950 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0446e024 774889c5 ntdll!RtlFindActivationContextSectionString+0x15
0446e0ec 774886c1 ntdll!sxsisol_SearchActCtxForDllName+0x95
0446e254 7748a10c ntdll!RtlDosApplyFileIsolationRedirection_Ustr+0x2e1
0446e2b8 774872ee ntdll!LdrpPreprocessDllName+0x27c
0446e540 774865d2 ntdll!LdrpLoadForwardedDll+0xdd
0446e5dc 77486129 ntdll!LdrpGetDelayloadExportDll+0x82
0446e878 77484ec4 ntdll!LdrpHandleProtectedDelayload+0x79
0446e8c8 76091fcd ntdll!LdrResolveDelayLoadedAPI+0x1e4
0446e8e8 76022853 gdi32full!__delayLoadHelper2+0x28
0446e9f8 7606d33a gdi32full!_tailMerge_textshaping_dll+0xd
0446ea38 7602f090 gdi32full!ScriptShape+0xda
0446eab0 7601a9e4 gdi32full!RenderItemNoFallback+0x14590
0446eae8 7601a798 gdi32full!RenderItemWithFallback+0xb4
0446eb18 7601a66c gdi32full!RenderItem+0x28
0446eb70 76017456 gdi32full!ScriptStringAnalyzeGlyphs+0x1bc
0446ec84 760183f3 gdi32full!ScriptStringAnalyse+0x7e6
0446ee10 760162a3 gdi32full!LpkCharsetDraw+0xa93
0446ee50 765bea6b gdi32full!LpkDrawTextEx+0x203
0446eeb4 765be971 user32!DT_DrawStr+0x69
0446ef0c 765be56e user32!DT_GetLineBreak+0xf8
0446efdc 7662a3ee user32!DrawTextExWorker+0x1c4
0446eff8 7250d014 user32!DrawTextExW+0x1e
0446f05c 72512f9a uxtheme!CTextDraw::GetTextExtent+0x109
0446f0a4 72504886 uxtheme!GetThemeTextExtent+0x8a
0446f0f8 724d9f6a uxtheme!_GetNcCaptionTextSize+0x61
0446f274 724d6a72 uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
0446f358 724dc31f uxtheme!_WindowPosChangedWorker+0x73
0446f364 724d8706 uxtheme!OnOwpPostWindowPosChanged+0x1f
0446f3c8 765b3b50 uxtheme!ThemePostWndProc+0x356
0446f4c4 765b35aa user32!UserCallWinProcCheckWow+0x4f0
0446f528 765c0977 user32!DispatchClientMessage+0xea
0446f568 774b8b0d user32!__fnINLPWINDOWPOS+0x37
0446f5b8 769c12ac ntdll!KiUserCallbackDispatcher+0x4d
0446f5bc 72502a9f win32u!NtUserSetWindowPos+0xc
0446f5e8 724d9a78 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0446f66c 765b3af8 uxtheme!ThemePreWndProc+0x988
0446f768 765b23e5 user32!UserCallWinProcCheckWow+0x498
0446f7e4 765b1f30 user32!DispatchMessageWorker+0x4a5
0446f7f0 5668f5a1 user32!DispatchMessageW+0x10
0446f814 5668f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0446f874 5669196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0446f880 566affcb CfgRelayEx!CThread::ThreadProc+0x1f
0446f8bc 76757ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0446f8cc 774abb3b kernel32!BaseThreadInitThunk+0x19
0446f924 774ababf ntdll!__RtlUserThreadStart+0x2b
0446f934 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0429e1a0 7769fa39 ntdll!_SEH_prolog4_GS+0x1a
0429e23c 7769fb25 ntdll!LdrpGetDelayloadExportDll+0x80
0429e4ec 7769cd0b ntdll!LdrpHandleProtectedDelayload+0x95
0429e544 76e01280 ntdll!LdrResolveDelayLoadedAPI+0x17b
0429e564 76e02b7d gdi32full!__delayLoadHelper2+0x28
0429e690 76df1d3f gdi32full!_tailMerge_textshaping_dll+0xd
0429ec38 76df28dc gdi32full!LoadFont+0x307
0429ec5c 76df33e3 gdi32full!FindOrCreateFaceCache+0x98
0429ed60 76df900b gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0429f1c4 76df81ef gdi32full!ScriptStringAnalyse+0x92b
0429f344 76df7a40 gdi32full!LpkCharsetDraw+0x60f
0429f370 7743d3cd gdi32full!LpkDrawTextEx+0x30
0429f3cc 7743d264 user32!DT_DrawStr+0x5f
0429f42c 7743cd9b user32!DT_GetLineBreak+0xa2
0429f4fc 7743cb9e user32!DrawTextExWorker+0x1f9
0429f518 7177e6ca user32!DrawTextExW+0x1e
0429f57c 7177dd34 uxtheme!CTextDraw::GetTextExtent+0xa4
0429f5c4 717743c9 uxtheme!GetThemeTextExtent+0x74
0429f618 71780f87 uxtheme!_GetNcCaptionTextSize+0x61
0429f708 7178293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0429f7b4 717829ef uxtheme!_WindowPosChangedWorker+0x7c
0429f7c0 7177f545 uxtheme!OnOwpPostWindowPosChanged+0x1f
0429f810 77447d93 uxtheme!ThemePostWndProc+0x355
0429f8fc 7744796a user32!UserCallWinProcCheckWow+0x363
0429f960 7744f6b7 user32!DispatchClientMessage+0xea
0429f9a0 776c54bd user32!__fnINLPWINDOWPOS+0x37
0429f9f0 7179d44f ntdll!KiUserCallbackDispatcher+0x4d
0429fa1c 717800ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0429fa78 77447d3f uxtheme!ThemePreWndProc+0x43f
0429fb64 774466a1 user32!UserCallWinProcCheckWow+0x30f
0429fbe0 774461c0 user32!DispatchMessageWorker+0x4d1
0429fbec 797bf5a1 user32!DispatchMessageW+0x10
0429fc10 797bf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0429fc70 797c196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0429fc7c 797dffcb CfgRelayEx!CThread::ThreadProc+0x1f
0429fcb8 76b3fcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0429fcc8 776b809e kernel32!BaseThreadInitThunk+0x19
0429fd24 776b806e ntdll!__RtlUserThreadStart+0x2f
0429fd34 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0542e000 775aca8a ntdll!RtlpLfhIncrementDataSlot+0x5
0542e080 775ac64e ntdll!RtlpAllocateHeapInternal+0x42a
0542e098 76ddf6d8 ntdll!RtlAllocateHeap+0x3e
0542e0b8 76de1da7 ucrtbase!_malloc_base+0x28
0542e0f0 751c4224 ucrtbase!__crt_state_management::wrapped_invoke<void * (__cdecl*)(unsigned int),unsigned int,void *>+0x57
0542e0fc 751cc209 gdi32full!operator new+0x1c
0542e128 751cc3d0 gdi32full!std::_List_node_emplace_op2<std::allocator<std::_List_node<std::pair<unsigned int const ,CFontHead>,void *> > >::_List_node_emplace_op2<std::allocator<std::_List_node<std::pair<unsigned int const ,CFontHead>,void *> > ><std::pair<unsigned int,CFontHead> >+0x25
0542e168 751ccf3a gdi32full!std::_Hash<std::_Umap_traits<unsigned int,CFontHead,std::_Uhash_compare<unsigned int,std::hash<unsigned int>,std::equal_to<unsigned int> >,std::allocator<std::pair<unsigned int const ,CFontHead> >,0> >::emplace<std::pair<unsigned int,CFontHead> >+0x4f
0542e1d4 751cb77c gdi32full!InsertCFontCache+0x77
0542e248 751bf250 gdi32full!plfCreateLOCALFONT+0xf2
0542e40c 75223386 gdi32full!CreateFontIndirectWImpl+0xc0
0542e508 75223d18 gdi32full!CacheFontLinkingData+0x233
0542e528 752240ad gdi32full!IsFontRegLinked+0x28
0542ead0 75219ceb gdi32full!LoadFont+0x29e
0542eaf4 75219e42 gdi32full!FindOrCreateFaceCache+0xc7
0542ec00 751b8ae5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
0542efa8 751b94db gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
0542f0c4 751ba873 gdi32full!ScriptStringAnalyse+0x3eb
0542f260 751b8733 gdi32full!LpkCharsetDraw+0xa93
0542f2a0 75c8f1ab gdi32full!LpkDrawTextEx+0x203
0542f304 75c8f0b1 user32!DT_DrawStr+0x69
0542f35c 75c8ecae user32!DT_GetLineBreak+0xf8
0542f42c 75cfc8fe user32!DrawTextExWorker+0x1c4
0542f448 70ab0fc4 user32!DrawTextExW+0x1e
0542f4ac 70ab6fba uxtheme!CTextDraw::GetTextExtent+0x109
0542f4f4 70aa87ad uxtheme!GetThemeTextExtent+0x8a
0542f548 70a768ba uxtheme!_GetNcCaptionTextSize+0x61
0542f6c0 70a77bfe uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
0542f7a4 70a7c32f uxtheme!_WindowPosChangedWorker+0x73
0542f7b0 70a790e0 uxtheme!OnOwpPostWindowPosChanged+0x1f
0542f818 75c84260 uxtheme!ThemePostWndProc+0x340
0542f914 75c83cba user32!UserCallWinProcCheckWow+0x4f0
0542f978 75c910b7 user32!DispatchClientMessage+0xea
0542f9b8 775d916d user32!__fnINLPWINDOWPOS+0x37
0542fa08 774712ac ntdll!KiUserCallbackDispatcher+0x4d
0542fa0c 70aa6a2f win32u!NtUserSetWindowPos+0xc
0542fa38 70a7a478 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0542fab8 75c84208 uxtheme!ThemePreWndProc+0x988
0542fbb4 75c82ae5 user32!UserCallWinProcCheckWow+0x498
0542fc30 75c82630 user32!DispatchMessageWorker+0x4a5
0542fc3c 5c7ef5a1 user32!DispatchMessageW+0x10
0542fc60 5c7ef2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0542fcc0 5c7f196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0542fccc 5c80ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0542fd08 76a77ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0542fd18 775cc0cb kernel32!BaseThreadInitThunk+0x19
0542fd70 775cc04f ntdll!__RtlUserThreadStart+0x2b
0542fd80 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0014fa64 5767aaed CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0xd
0014fa7c 5767aaed CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x1d
0014fa94 5767aaed CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x1d
0014faac 57694fa3 CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x1d
0014fad0 57680f53 CfgRelayEx!ATL::`dynamic atexit destructor for '_AtlBaseModule''+0x569
0014fafc 57680e31 CfgRelayEx!<lambda_275893d493268fdec8709772e3fcec0e>::operator()+0x89
0014fb30 57680e7f CfgRelayEx!__crt_seh_guarded_call<int>::operator()<<lambda_995298e7d72eb4c2aab26c0585b3abe5>,<lambda_275893d493268fdec8709772e3fcec0e> &,<lambda_293819299cbf9a7022e18b56a874bb5c> >+0x27
0014fb50 57681158 CfgRelayEx!__acrt_lock_and_call<<lambda_275893d493268fdec8709772e3fcec0e> >+0x24
0014fb64 57680714 CfgRelayEx!_execute_onexit_table+0x17
0014fb9c 57680895 CfgRelayEx!common_exit+0xa1
0014fbac 576692d7 CfgRelayEx!_cexit+0xb
0014fbe0 5766918f CfgRelayEx!dllmain_crt_process_detach+0x39
0014fbec 576693df CfgRelayEx!dllmain_crt_dispatch+0x4e
0014fc2c 5766947d CfgRelayEx!dllmain_dispatch+0xaf
0014fc40 77da9280 CfgRelayEx!_DllMainCRTStartup+0x1c
0014fc60 77dc8f88 ntdll!LdrpCallInitRoutine+0x14
0014fd04 77dc8e2a ntdll!LdrShutdownProcess+0x1aa
0014fd18 76727a3c ntdll!RtlExitUserProcess+0x74
0014fd2c 0018275a kernel32!ExitProcessStub+0x12
0014fd38 001826ef srvhost!exit_or_terminate_process+0x40
0014fd70 00182895 srvhost!common_exit+0xee
0014fd84 00177e90 srvhost!exit+0x11
0014fdc4 7672343d srvhost!__scrt_common_main_seh+0x179
0014fdd0 77da9812 kernel32!BaseThreadInitThunk+0xe
0014fe10 77da97e5 ntdll!__RtlUserThreadStart+0x70
0014fe28 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
054fe590 75a87a2b gdi32full!LoadFont+0x15
054fe5b4 75a87b82 gdi32full!FindOrCreateFaceCache+0xc7
054fe6c0 75a26aa5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
054fea68 75a2749b gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
054feb84 75a28833 gdi32full!ScriptStringAnalyse+0x3eb
054fed18 75a266f3 gdi32full!LpkCharsetDraw+0xa93
054fed58 763deedb gdi32full!LpkDrawTextEx+0x203
054fedbc 763dede1 user32!DT_DrawStr+0x69
054fee14 763de9de user32!DT_GetLineBreak+0xf8
054feee4 7644c5fe user32!DrawTextExWorker+0x1c4
054fef00 6b9c1014 user32!DrawTextExW+0x1e
054fef64 6b9c6ffa uxtheme!CTextDraw::GetTextExtent+0x109
054fefac 6b9b880d uxtheme!GetThemeTextExtent+0x8a
054ff000 6b9868ba uxtheme!_GetNcCaptionTextSize+0x61
054ff178 6b987bfe uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
054ff25c 6b98c32f uxtheme!_WindowPosChangedWorker+0x73
054ff268 6b9890e0 uxtheme!OnOwpPostWindowPosChanged+0x1f
054ff2d0 763d3f80 uxtheme!ThemePostWndProc+0x340
054ff3cc 763d39da user32!UserCallWinProcCheckWow+0x4f0
054ff430 763e0de7 user32!DispatchClientMessage+0xea
054ff470 76fe916d user32!__fnINLPWINDOWPOS+0x37
054ff4c0 752f12ac ntdll!KiUserCallbackDispatcher+0x4d
054ff4c4 6b9b6a8f win32u!NtUserSetWindowPos+0xc
054ff4f0 6b98a478 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
054ff574 763d3f28 uxtheme!ThemePreWndProc+0x988
054ff670 763d2815 user32!UserCallWinProcCheckWow+0x498
054ff6ec 763d2360 user32!DispatchMessageWorker+0x4a5
054ff6f8 790ef5a1 user32!DispatchMessageW+0x10
054ff71c 790ef2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
054ff77c 790f196f CfgRelayEx!CConfigCenterStub::Process+0xa7
054ff788 7910ffcb CfgRelayEx!CThread::ThreadProc+0x1f
054ff7c4 75707ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
054ff7d4 76fdc0cb kernel32!BaseThreadInitThunk+0x19
054ff82c 76fdc04f ntdll!__RtlUserThreadStart+0x2b
054ff83c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
05a7fbe0 756b14ad ntdll!RtlFreeHeap+0x3a
05a7fbf4 0f2e2d01 kernel32!HeapFree+0x14
05a7fc08 0f2e2ab1 CfgRelayEx!_free_base+0x1c
05a7fc20 0f2e2a68 CfgRelayEx!destroy_ptd+0x3b
05a7fc2c 77e693e1 CfgRelayEx!destroy_fls+0x13
05a7fc48 77e8214f ntdll!RtlProcessFlsData+0x57
05a7fce0 77e823e3 ntdll!LdrShutdownThread+0x35
05a7fcf0 755d19e8 ntdll!RtlExitUserThread+0x2a
05a7fd04 72856383 KERNELBASE!FreeLibraryAndExitThread+0x5f
05a7fd24 756b343d mswsock!SockAsyncThread+0xf5
05a7fd30 77e69812 kernel32!BaseThreadInitThunk+0xe
05a7fd70 77e697e5 ntdll!__RtlUserThreadStart+0x70
05a7fd88 00000000 ntdll!_RtlUserThreadStart+0x1b