Crash in cfgrelayex, Analyzed 5 dumps, total processed 261, rate equals 1.92%

Top 1: Version = 2.7224.1000.620, Total count = 5

dump count = 2

ChildEBP RetAddr  
03fde018 76015ffc gdi32full!pcfLocateCFONT+0x8
03fde398 76010cb4 gdi32full!GetFontRealizationInfo+0xdc
03fde948 76011816 gdi32full!LoadFont+0x76
03fde96c 76012039 gdi32full!FindOrCreateFaceCache+0x98
03fdea70 760193f4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
03fdee18 760177f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
03fdf284 760168ef gdi32full!ScriptStringAnalyse+0xa16
03fdf424 76016140 gdi32full!LpkCharsetDraw+0x60f
03fdf450 75e0ae0d gdi32full!LpkDrawTextEx+0x30
03fdf4ac 75e0aca4 user32!DT_DrawStr+0x5f
03fdf50c 75e0a7db user32!DT_GetLineBreak+0xa2
03fdf5dc 75e0a5de user32!DrawTextExWorker+0x1f9
03fdf5f8 72dde6ea user32!DrawTextExW+0x1e
03fdf65c 72dddd84 uxtheme!CTextDraw::GetTextExtent+0xa4
03fdf6a4 72dd4349 uxtheme!GetThemeTextExtent+0x74
03fdf6f8 72de0fa7 uxtheme!_GetNcCaptionTextSize+0x61
03fdf7ec 72de295c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
03fdf898 72de2a0f uxtheme!_WindowPosChangedWorker+0x7c
03fdf8a4 72ddf565 uxtheme!OnOwpPostWindowPosChanged+0x1f
03fdf8f4 75e15ef3 uxtheme!ThemePostWndProc+0x355
03fdf9dc 75e15aca user32!UserCallWinProcCheckWow+0x363
03fdfa40 75e1cf37 user32!DispatchClientMessage+0xea
03fdfa80 77a7505d user32!__fnINLPWINDOWPOS+0x37
03fdfad0 75fa124c ntdll!KiUserCallbackDispatcher+0x4d
03fdfad4 72dfd4af win32u!NtUserSetWindowPos+0xc
03fdfb00 72de010f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03fdfb5c 75e15e9f uxtheme!ThemePreWndProc+0x43f
03fdfc44 75e13c3a user32!UserCallWinProcCheckWow+0x30f
03fdfcb8 75e13a00 user32!DispatchMessageWorker+0x22a
03fdfcc4 655af5a1 user32!DispatchMessageW+0x10
03fdfce8 655af2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03fdfd48 655b196f CfgRelayEx!CConfigCenterStub::Process+0xa7
03fdfd54 655cffcb CfgRelayEx!CThread::ThreadProc+0x1f
03fdfd90 7733fa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03fdfda0 77a67c7e kernel32!BaseThreadInitThunk+0x19
03fdfdfc 77a67c4e ntdll!__RtlUserThreadStart+0x2f
03fdfe0c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04a8e1cc 75f36cb7 gdi32full!bGetRealizationInfoInternal+0x15
04a8e200 75f64a63 gdi32full!GetFontRealizationInfo+0xd7
04a8e7b0 75f66f9f gdi32full!LoadFont+0x70
04a8e7d4 75f65a69 gdi32full!FindOrCreateFaceCache+0x98
04a8e8d8 75f39d6c gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
04a8ec78 75f3a196 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2ac
04a8ed84 75f3790b gdi32full!ScriptStringAnalyse+0x3e6
04a8eef4 75f37170 gdi32full!LpkCharsetDraw+0x53b
04a8ef20 752ec903 gdi32full!LpkDrawTextEx+0x30
04a8efa4 752ec2fd user32!DT_GetLineBreak+0x113
04a8f064 7530698e user32!DrawTextExWorker+0x1ed
04a8f080 6fa8ee89 user32!DrawTextExW+0x1e
04a8f51c 6fa8c349 uxtheme!CThemeWnd::GetNcWindowMetrics+0x809
04a8f668 752e70c3 uxtheme!_ThemeDefWindowProc+0x899
04a8f75c 752e6b2a user32!UserCallWinProcCheckWow+0x4d3
04a8f7c0 752f0217 user32!DispatchClientMessage+0xea
04a8f800 771f71dc user32!__fnINLPWINDOWPOS+0x37
04a8f850 7547129c ntdll!KiUserCallbackDispatcher+0x4c
04a8f854 6fabb77f win32u!NtUserSetWindowPos+0xc
04a8f880 6fa8dd73 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04a8f8dc 752e706a uxtheme!ThemePreWndProc+0x413
04a8f9d0 752e59c8 user32!UserCallWinProcCheckWow+0x47a
04a8fa4c 752e5500 user32!DispatchMessageWorker+0x4b8
04a8fa58 7bd3f5a1 user32!DispatchMessageW+0x10
04a8fa7c 7bd3f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04a8fadc 7bd4196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04a8fae8 7bd5ffcb CfgRelayEx!CThread::ThreadProc+0x1f
04a8fb24 75e26839 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04a8fb34 771e906f kernel32!BaseThreadInitThunk+0x19
04a8fb8c 771e903d ntdll!__RtlUserThreadStart+0x2b
04a8fb9c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0397e118 76c106c6 gdi32full!GetFontRealizationInfo+0x15
0397e6c8 76c11226 gdi32full!LoadFont+0x76
0397e6ec 76c117b0 gdi32full!FindOrCreateFaceCache+0x98
0397e7f0 76c18e54 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0397eb98 76c17256 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
0397f004 76c1634f gdi32full!ScriptStringAnalyse+0xa16
0397f1a4 76c15ba0 gdi32full!LpkCharsetDraw+0x60f
0397f1d0 77149fed gdi32full!LpkDrawTextEx+0x30
0397f22c 77149e84 user32!DT_DrawStr+0x5f
0397f28c 771499bb user32!DT_GetLineBreak+0xa2
0397f35c 771497be user32!DrawTextExWorker+0x1f9
0397f378 70f7e8ba user32!DrawTextExW+0x1e
0397f3dc 70f7df54 uxtheme!CTextDraw::GetTextExtent+0xa4
0397f424 70f74429 uxtheme!GetThemeTextExtent+0x74
0397f478 70f81167 uxtheme!_GetNcCaptionTextSize+0x61
0397f56c 70f82b1c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0397f618 70f82bcf uxtheme!_WindowPosChangedWorker+0x7c
0397f624 70f7f735 uxtheme!OnOwpPostWindowPosChanged+0x1f
0397f674 77154733 uxtheme!ThemePostWndProc+0x355
0397f75c 7715430a user32!UserCallWinProcCheckWow+0x363
0397f7c0 7715b937 user32!DispatchClientMessage+0xea
0397f800 7734357d user32!__fnINLPWINDOWPOS+0x37
0397f850 70f9d7bf ntdll!KiUserCallbackDispatcher+0x4d
0397f87c 70f802cf uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0397f8d8 771546df uxtheme!ThemePreWndProc+0x43f
0397f9c0 77152a3a user32!UserCallWinProcCheckWow+0x30f
0397fa34 77152800 user32!DispatchMessageWorker+0x22a
0397fa40 7b47f5a1 user32!DispatchMessageW+0x10
0397fa64 7b47f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0397fac4 7b48196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0397fad0 7b49ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0397fb0c 7658f989 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0397fb1c 77337084 kernel32!BaseThreadInitThunk+0x19
0397fb78 77337054 ntdll!__RtlUserThreadStart+0x2f
0397fb88 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0357fba4 60d8345d ntdll!RtlInitUnicodeString+0x1b
0357fbec 60d83c0f CfgRelayEx!CChannelImpl::Run+0x3d
0357fbf4 60d9ffcb CfgRelayEx!CChannelImpl::ThreadImpl+0xf
0357fc30 7502343d CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0357fc3c 77399802 kernel32!BaseThreadInitThunk+0xe
0357fc7c 773997d5 ntdll!__RtlUserThreadStart+0x70
0357fc94 00000000 ntdll!_RtlUserThreadStart+0x1b