Crash in cfgrelayex, Analyzed 2 dumps, total processed 129, rate equals 1.55%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
04dee034 77d4eab0 ntdll!RtlAnsiStringToUnicodeString+0x1b
04dee060 77d4eb95 ntdll!LdrpAppendAnsiStringToFilenameBuffer+0x66
04dee2e0 77d4fa39 ntdll!LdrpLoadForwardedDll+0x75
04dee37c 77d4fb25 ntdll!LdrpGetDelayloadExportDll+0x80
04dee628 77d4cd0b ntdll!LdrpHandleProtectedDelayload+0x95
04dee680 76641280 ntdll!LdrResolveDelayLoadedAPI+0x17b
04dee6a0 76642b7d gdi32full!__delayLoadHelper2+0x28
04dee7b0 7663d21c gdi32full!_tailMerge_textshaping_dll+0xd
04dee7f0 7663c6e9 gdi32full!ScriptShape+0x17c
04dee868 7663be19 gdi32full!RenderItemNoFallback+0x5f9
04dee8a0 7663bcd8 gdi32full!RenderItemWithFallback+0x119
04dee8c8 7663ba5e gdi32full!RenderItem+0x28
04dee920 76638e18 gdi32full!ScriptStringAnalyzeGlyphs+0x1be
04deed84 766381ef gdi32full!ScriptStringAnalyse+0x738
04deef1c 76637a40 gdi32full!LpkCharsetDraw+0x60f
04deef48 75c8d4ed gdi32full!LpkDrawTextEx+0x30
04deefa4 75c8d384 user32!DT_DrawStr+0x5f
04def004 75c8cebb user32!DT_GetLineBreak+0xa2
04def0d4 75c8ccbe user32!DrawTextExWorker+0x1f9
04def0f0 723ae6ca user32!DrawTextExW+0x1e
04def154 723add34 uxtheme!CTextDraw::GetTextExtent+0xa4
04def19c 723a43c9 uxtheme!GetThemeTextExtent+0x74
04def1f0 723b0f87 uxtheme!_GetNcCaptionTextSize+0x61
04def2e0 723b293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
04def38c 723b29ef uxtheme!_WindowPosChangedWorker+0x7c
04def398 723af545 uxtheme!OnOwpPostWindowPosChanged+0x1f
04def3e8 75c97eb3 uxtheme!ThemePostWndProc+0x355
04def4d4 75c97a8a user32!UserCallWinProcCheckWow+0x363
04def538 75c9f7d7 user32!DispatchClientMessage+0xea
04def578 77d754bd user32!__fnINLPWINDOWPOS+0x37
04def5c8 779c124c ntdll!KiUserCallbackDispatcher+0x4d
04def5cc 723cd44f win32u!NtUserSetWindowPos+0xc
04def5f8 723b00ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04def654 75c97e5f uxtheme!ThemePreWndProc+0x43f
04def740 75c967c1 user32!UserCallWinProcCheckWow+0x30f
04def7bc 75c962e0 user32!DispatchMessageWorker+0x4d1
04def7c8 50cef5a1 user32!DispatchMessageW+0x10
04def7ec 50cef2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04def84c 50cf196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04def858 50d0ffcb CfgRelayEx!CThread::ThreadProc+0x1f
04def894 77aafcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04def8a4 77d6809e kernel32!BaseThreadInitThunk+0x19
04def900 77d6806e ntdll!__RtlUserThreadStart+0x2f
04def910 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04ebe1a0 771f1f6f gdi32full!GetFontRealizationInfo+0x1c
04ebe750 771e7e0b gdi32full!LoadFont+0x70
04ebe774 771e7f62 gdi32full!FindOrCreateFaceCache+0xc7
04ebe880 77186ad5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
04ebec28 771874cb gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
04ebed44 77188863 gdi32full!ScriptStringAnalyse+0x3eb
04ebeec0 77186723 gdi32full!LpkCharsetDraw+0xa93
04ebef00 7574f57b gdi32full!LpkDrawTextEx+0x203
04ebef64 7574f481 user32!DT_DrawStr+0x69
04ebefbc 7574f07e user32!DT_GetLineBreak+0xf8
04ebf08c 757bcb2e user32!DrawTextExWorker+0x1c4
04ebf0a8 714c09c4 user32!DrawTextExW+0x1e
04ebf10c 714c69aa uxtheme!CTextDraw::GetTextExtent+0x109
04ebf154 714b81bd uxtheme!GetThemeTextExtent+0x8a
04ebf1a8 7148689a uxtheme!_GetNcCaptionTextSize+0x61
04ebf320 71487bde uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
04ebf404 7148c30f uxtheme!_WindowPosChangedWorker+0x73
04ebf410 714890c0 uxtheme!OnOwpPostWindowPosChanged+0x1f
04ebf478 75744630 uxtheme!ThemePostWndProc+0x340
04ebf574 7574408a user32!UserCallWinProcCheckWow+0x4f0
04ebf5d8 75751487 user32!DispatchClientMessage+0xea
04ebf618 772e91bd user32!__fnINLPWINDOWPOS+0x37
04ebf668 76e412ac ntdll!KiUserCallbackDispatcher+0x4d
04ebf66c 714b643f win32u!NtUserSetWindowPos+0xc
04ebf698 7148a458 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04ebf718 757445d8 uxtheme!ThemePreWndProc+0x988
04ebf814 75742ec5 user32!UserCallWinProcCheckWow+0x498
04ebf890 75742a10 user32!DispatchMessageWorker+0x4a5
04ebf89c 77ebf5a1 user32!DispatchMessageW+0x10
04ebf8c0 77ebf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04ebf920 77ec196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04ebf92c 77edffcb CfgRelayEx!CThread::ThreadProc+0x1f
04ebf968 76c57ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04ebf978 772dc11b kernel32!BaseThreadInitThunk+0x19
04ebf9d0 772dc09f ntdll!__RtlUserThreadStart+0x2b
04ebf9e0 00000000 ntdll!_RtlUserThreadStart+0x1b