Crash in cfgrelayex, Analyzed 5 dumps, total processed 145, rate equals 3.45%

Top 1: Version = 2.7224.1000.620, Total count = 5

dump count = 1

ChildEBP RetAddr  
0563fbc8 6e74b472 CfgRelayEx!CClientMgr::OnSlowCfgRefresh+0x15d
0563fbe0 6e753390 CfgRelayEx!CClientMgr::OnReceiveMessage+0x42
0563fc3c 6e75320f CfgRelayEx!CChannelImpl::ReceiveThreadImp+0x170
0563fc44 6e76ffcb CfgRelayEx!CChannelImpl::ReceiveThread+0xf
0563fc80 76687ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0563fc90 77a8c0cb kernel32!BaseThreadInitThunk+0x19
0563fce8 77a8c04f ntdll!__RtlUserThreadStart+0x2b
0563fcf8 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
005bfb34 7726e143 ntdll!RtlpLowFragHeapFree+0xc5
005bfb4c 74c714bd ntdll!RtlFreeHeap+0x105
005bfb60 60642d01 kernel32!HeapFree+0x14
005bfb74 60648baf CfgRelayEx!_free_base+0x1c
005bfb94 60642b55 CfgRelayEx!__acrt_free_locale+0x10d
005bfba4 606428d2 CfgRelayEx!replace_current_thread_locale_nolock+0x36
005bfbdc 606429b0 CfgRelayEx!__crt_seh_guarded_call<void>::operator()<<lambda_5b71d36f03204c0beab531769a5b5694>,<lambda_be2b3da3f62db62e9dad5dc70221a656> &,<lambda_8f9ce462984622f9bf76b59e2aaaf805> >+0x29
005bfbfc 60642b18 CfgRelayEx!__acrt_lock_and_call<<lambda_be2b3da3f62db62e9dad5dc70221a656> >+0x24
005bfc3c 60642a68 CfgRelayEx!destroy_ptd+0xa2
005bfc48 7728fb85 CfgRelayEx!destroy_fls+0x13
005bfc68 75a44008 ntdll!RtlFlsFree+0xa0
005bfc74 60646c1b KERNELBASE!FlsFree+0xe
005bfc88 60642cdb CfgRelayEx!__acrt_FlsFree+0x3d
005bfc90 606412f7 CfgRelayEx!__acrt_uninitialize_ptd+0x10
005bfc9c 60628dfd CfgRelayEx!__acrt_uninitialize_critical+0xd
005bfca4 6062931e CfgRelayEx!__scrt_dllmain_uninitialize_critical+0x7
005bfca8 606292f4 CfgRelayEx!dllmain_crt_process_detach+0x80
005bfcdc 6062918f CfgRelayEx!dllmain_crt_process_detach+0x56
005bfce8 606293df CfgRelayEx!dllmain_crt_dispatch+0x4e
005bfd28 6062947d CfgRelayEx!dllmain_dispatch+0xaf
005bfd3c 772792c0 CfgRelayEx!_DllMainCRTStartup+0x1c
005bfd5c 7728f567 ntdll!LdrpCallInitRoutine+0x14
005bfe00 7728f409 ntdll!LdrShutdownProcess+0x1aa
005bfe14 74c77a7c ntdll!RtlExitUserProcess+0x74
005bfe28 003b275a kernel32!ExitProcessStub+0x12
005bfe34 003b26ef srvhost!exit_or_terminate_process+0x40
005bfe6c 003b2895 srvhost!common_exit+0xee
005bfe80 003a7e90 srvhost!exit+0x11
005bfec0 74c7347d srvhost!__scrt_common_main_seh+0x179
005bfecc 77279852 kernel32!BaseThreadInitThunk+0xe
005bff0c 77279825 ntdll!__RtlUserThreadStart+0x70
005bff24 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0453e020 75d85cf9 gdi32full!pcfLocateCFONT+0x8
0453e3a0 75df1b9f gdi32full!GetFontRealizationInfo+0x109
0453e950 75de7a2b gdi32full!LoadFont+0x70
0453e974 75de7b82 gdi32full!FindOrCreateFaceCache+0xc7
0453ea80 75d86aa5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
0453ee28 75d8749b gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
0453ef44 75d88833 gdi32full!ScriptStringAnalyse+0x3eb
0453f0c8 75d866f3 gdi32full!LpkCharsetDraw+0xa93
0453f108 76f6eedb gdi32full!LpkDrawTextEx+0x203
0453f16c 76f6ede1 user32!DT_DrawStr+0x69
0453f1c4 76f6e9de user32!DT_GetLineBreak+0xf8
0453f294 76fdc5fe user32!DrawTextExWorker+0x1c4
0453f2b0 728d1014 user32!DrawTextExW+0x1e
0453f314 728d6ffa uxtheme!CTextDraw::GetTextExtent+0x109
0453f35c 728c880d uxtheme!GetThemeTextExtent+0x8a
0453f3b0 728968ba uxtheme!_GetNcCaptionTextSize+0x61
0453f528 72897bfe uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
0453f60c 7289c32f uxtheme!_WindowPosChangedWorker+0x73
0453f618 728990e0 uxtheme!OnOwpPostWindowPosChanged+0x1f
0453f680 76f63f80 uxtheme!ThemePostWndProc+0x340
0453f77c 76f639da user32!UserCallWinProcCheckWow+0x4f0
0453f7e0 76f70de7 user32!DispatchClientMessage+0xea
0453f820 77b5916d user32!__fnINLPWINDOWPOS+0x37
0453f870 75bb12ac ntdll!KiUserCallbackDispatcher+0x4d
0453f874 728c6a8f win32u!NtUserSetWindowPos+0xc
0453f8a0 7289a478 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0453f920 76f63f28 uxtheme!ThemePreWndProc+0x988
0453fa1c 76f62815 user32!UserCallWinProcCheckWow+0x498
0453fa98 76f62360 user32!DispatchMessageWorker+0x4a5
0453faa4 7931f5a1 user32!DispatchMessageW+0x10
0453fac8 7931f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0453fb28 7932196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0453fb34 7933ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0453fb70 77107ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0453fb80 77b4c0cb kernel32!BaseThreadInitThunk+0x19
0453fbd8 77b4c04f ntdll!__RtlUserThreadStart+0x2b
0453fbe8 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
03f5e1e0 7697218f gdi32full!GetFontRealizationInfo+0x1c
03f5e790 7696802b gdi32full!LoadFont+0x70
03f5e7b4 76968182 gdi32full!FindOrCreateFaceCache+0xc7
03f5e8c0 76906ae5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
03f5ec68 769074db gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
03f5ed84 76908873 gdi32full!ScriptStringAnalyse+0x3eb
03f5ef08 76906733 gdi32full!LpkCharsetDraw+0xa93
03f5ef48 76a5f44b gdi32full!LpkDrawTextEx+0x203
03f5efac 76a5f351 user32!DT_DrawStr+0x69
03f5f004 76a5ef4e user32!DT_GetLineBreak+0xf8
03f5f0d4 76acd03e user32!DrawTextExWorker+0x1c4
03f5f0f0 6304fb54 user32!DrawTextExW+0x1e
03f5f154 63055b3a uxtheme!CTextDraw::GetTextExtent+0x109
03f5f19c 6304733d uxtheme!GetThemeTextExtent+0x8a
03f5f1f0 6301686a uxtheme!_GetNcCaptionTextSize+0x61
03f5f36c 63017bae uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
03f5f450 6301c2ef uxtheme!_WindowPosChangedWorker+0x73
03f5f45c 630190a6 uxtheme!OnOwpPostWindowPosChanged+0x1f
03f5f4c0 76a54510 uxtheme!ThemePostWndProc+0x356
03f5f5bc 76a53f6a user32!UserCallWinProcCheckWow+0x4f0
03f5f620 76a61357 user32!DispatchClientMessage+0xea
03f5f660 7775919d user32!__fnINLPWINDOWPOS+0x37
03f5f6b0 76e012ac ntdll!KiUserCallbackDispatcher+0x4d
03f5f6b4 630455bf win32u!NtUserSetWindowPos+0xc
03f5f6e0 6301a438 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03f5f764 76a544b8 uxtheme!ThemePreWndProc+0x988
03f5f860 76a52da5 user32!UserCallWinProcCheckWow+0x498
03f5f8dc 76a528f0 user32!DispatchMessageWorker+0x4a5
03f5f8e8 58d2f5a1 user32!DispatchMessageW+0x10
03f5f90c 58d2f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03f5f96c 58d3196f CfgRelayEx!CConfigCenterStub::Process+0xa7
03f5f978 58d4ffcb CfgRelayEx!CThread::ThreadProc+0x1f
03f5f9b4 76687ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03f5f9c4 7774c10b kernel32!BaseThreadInitThunk+0x19
03f5fa1c 7774c08f ntdll!__RtlUserThreadStart+0x2b
03f5fa2c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04ebe1a0 771f1f6f gdi32full!GetFontRealizationInfo+0x1c
04ebe750 771e7e0b gdi32full!LoadFont+0x70
04ebe774 771e7f62 gdi32full!FindOrCreateFaceCache+0xc7
04ebe880 77186ad5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
04ebec28 771874cb gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
04ebed44 77188863 gdi32full!ScriptStringAnalyse+0x3eb
04ebeec0 77186723 gdi32full!LpkCharsetDraw+0xa93
04ebef00 7574f57b gdi32full!LpkDrawTextEx+0x203
04ebef64 7574f481 user32!DT_DrawStr+0x69
04ebefbc 7574f07e user32!DT_GetLineBreak+0xf8
04ebf08c 757bcb2e user32!DrawTextExWorker+0x1c4
04ebf0a8 714c09c4 user32!DrawTextExW+0x1e
04ebf10c 714c69aa uxtheme!CTextDraw::GetTextExtent+0x109
04ebf154 714b81bd uxtheme!GetThemeTextExtent+0x8a
04ebf1a8 7148689a uxtheme!_GetNcCaptionTextSize+0x61
04ebf320 71487bde uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
04ebf404 7148c30f uxtheme!_WindowPosChangedWorker+0x73
04ebf410 714890c0 uxtheme!OnOwpPostWindowPosChanged+0x1f
04ebf478 75744630 uxtheme!ThemePostWndProc+0x340
04ebf574 7574408a user32!UserCallWinProcCheckWow+0x4f0
04ebf5d8 75751487 user32!DispatchClientMessage+0xea
04ebf618 772e91bd user32!__fnINLPWINDOWPOS+0x37
04ebf668 76e412ac ntdll!KiUserCallbackDispatcher+0x4d
04ebf66c 714b643f win32u!NtUserSetWindowPos+0xc
04ebf698 7148a458 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04ebf718 757445d8 uxtheme!ThemePreWndProc+0x988
04ebf814 75742ec5 user32!UserCallWinProcCheckWow+0x498
04ebf890 75742a10 user32!DispatchMessageWorker+0x4a5
04ebf89c 77ebf5a1 user32!DispatchMessageW+0x10
04ebf8c0 77ebf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04ebf920 77ec196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04ebf92c 77edffcb CfgRelayEx!CThread::ThreadProc+0x1f
04ebf968 76c57ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04ebf978 772dc11b kernel32!BaseThreadInitThunk+0x19
04ebf9d0 772dc09f ntdll!__RtlUserThreadStart+0x2b
04ebf9e0 00000000 ntdll!_RtlUserThreadStart+0x1b