Crash in cfgrelay, Analyzed 2 dumps, total processed 131, rate equals 1.53%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
040ef884 7b944bf2 CfgRelay!memcpy+0x250
040ef8a4 7b9450a2 CfgRelay!Pickle::Pickle+0x62
040ef8b8 7b93702e CfgRelay!IPC::Message::Message+0x12
040ef8cc 7b935fcb CfgRelay!std::queue<IPC::Message,std::deque<IPC::Message,std::allocator<IPC::Message> > >::push+0x5e
040ef8e0 7b929a13 CfgRelay!CChannelImpl::Send+0x1b
040efa28 7b925827 CfgRelay!CMainWnd::OnSlowCfgUpdateCallback+0x2f3
040efa30 7b926b98 CfgRelay!std::_Invoker_pmf_pointer::_Call<void (__thiscall CMainWnd::*)(void),CMainWnd * &>+0x17
040efa44 7b925642 CfgRelay!std::invoke<void (__thiscall CMainWnd::*&)(void),CMainWnd * &>+0x28
040efa54 7b9259bf CfgRelay!std::_Invoker_ret<std::_Unforced,0>::_Call<void (__thiscall CMainWnd::*&)(void),CMainWnd * &>+0x22
040efa64 7b925277 CfgRelay!std::_Call_binder<std::_Unforced,0,void (__thiscall CMainWnd::*)(void),std::tuple<CMainWnd *>,std::tuple<> >+0x2f
040efa88 7b925766 CfgRelay!std::_Binder<std::_Unforced,void (__thiscall CMainWnd::*)(void),CMainWnd *>::operator()<>+0x37
040efa90 7b926c35 CfgRelay!std::_Invoker_functor::_Call<std::_Binder<std::_Unforced,void (__thiscall CMainWnd::*)(void),CMainWnd *> &>+0x16
040efa9c 7b925785 CfgRelay!std::invoke<std::_Binder<std::_Unforced,void (__thiscall CMainWnd::*)(void),CMainWnd *> &>+0x15
040efaa8 7b92c9d3 CfgRelay!std::_Invoker_ret<void,1>::_Call<std::_Binder<std::_Unforced,void (__thiscall CMainWnd::*)(void),CMainWnd *> &>+0x15
040efab8 7b917785 CfgRelay!std::_Func_impl_no_alloc<std::_Binder<std::_Unforced,void (__thiscall CMainWnd::*)(void),CMainWnd *>,void>::_Do_call+0x13
040efac8 7b91d7d4 CfgRelay!std::_Func_class<void>::operator()+0x35
040efad4 7b91b649 CfgRelay!CConfigMgr::SlowConfigCallbackOnUI+0x24
040efae0 7b91d78b CfgRelay!mf_bind_t<CConfigMgr,CConfigMgr *,void>::Involk+0x19
040efae8 7b93307b CfgRelay!mf_bind_t<CConfigMgr,CConfigMgr *,void>::SimpleInvolk+0xb
040efaf4 7b92c327 CfgRelay!CUIThreadWindow::ProcessWindowMessage+0x2b
040efb50 73ce1a73 CfgRelay!ATL::CWindowImplBaseT<ATL::CWindow,ATL::CWinTraits<1442840576,0> >::WindowProc+0x67
040efb70 76b47463 atlthunk!AtlThunk_0x04+0x43
040efb9c 76b35b3d user32!_InternalCallWinProc+0x2b
040efc98 76b355e0 user32!UserCallWinProcCheckWow+0x49d
040efd04 76b41e59 user32!DispatchClientMessage+0x190
040efd40 7792bb66 user32!__fnDWORD+0x39
040efd78 76b44660 ntdll!KiUserCallbackDispatcher+0x36
040efdb4 7b90983b user32!GetMessageW+0x30
040efde4 7b90964b CfgRelay!WTL::CMessageLoop::Run+0x7b
040efe40 7b932e5f CfgRelay!CConfigCenterTrayClient::Process+0x8b
040efe4c 7b978cc3 CfgRelay!CThread::ThreadProc+0x1f
040efe88 76cf5d49 CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
040efe98 7791cebb kernel32!BaseThreadInitThunk+0x19
040efef0 7791ce41 ntdll!__RtlUserThreadStart+0x2b
040eff00 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

03b3fb84 74f96238 CfgRelay!ATL::CWindowImplBaseT<ATL::CWindow,ATL::CWinTraits<1442840576,0> >::WindowProc+0x67
03b3fbb0 74f968ea user32+0x16238
03b3fc28 74f97d31 user32+0x168ea
03b3fc88 74f97dfa user32+0x17d31
03b3fc98 5c2a9881 user32+0x17dfa
03b3fcbc 5c2a964b CfgRelay!WTL::CMessageLoop::Run+0xc1
03b3fd18 5c2d2e5f CfgRelay!CConfigCenterTrayClient::Process+0x8b
03b3fd24 5c318cc3 CfgRelay!CThread::ThreadProc+0x1f
03b3fd60 7532343d CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03b3fd6c 778f9732 kernel32!BaseThreadInitThunk+0xe
03b3fdac 778f9705 ntdll!__RtlUserThreadStart+0x70
03b3fdc4 00000000 ntdll!_RtlUserThreadStart+0x1b