Crash in cfgrelayex, Analyzed 4 dumps, total processed 149, rate equals 2.68%

Top 1: Version = 2.7224.1000.620, Total count = 4

dump count = 1

ChildEBP RetAddr  
04dbe018 77e2a2da ntdll!RtlWow64EnableFsRedirectionEx+0x1b
04dbe060 77e28504 ntdll!LdrpPreprocessDllName+0x1a
04dbe314 77e283b8 ntdll!LdrGetDllHandleEx+0x134
04dbe330 768887ce ntdll!LdrGetDllHandle+0x18
04dbe358 7792ac7e KERNELBASE!GetModuleHandleW+0x2e
04dbe360 7792a4a5 gdi32!wil_details_GetNtDllModuleHandle+0x14
04dbe378 77929cd5 gdi32!wil_details_RtlQueryFeatureConfiguration+0x20
04dbe3b0 7792a2f8 gdi32!wil_RtlStagingConfig_QueryFeatureState+0x3b
04dbe3f8 7792a1aa gdi32!wil_details_GetCurrentFeatureEnabledState+0x41
04dbe430 7792a401 gdi32!wil_details_FeatureStateCache_ReevaluateCachedFeatureEnabledState+0x4a
04dbe454 77929c90 gdi32!wil_details_IsEnabledFallback+0x28
04dbe468 77929c77 gdi32!Feature_Servicing_CFONTPrintLeak__private_IsEnabledFallback+0x11
04dbe480 77923943 gdi32!Feature_Servicing_CFONTPrintLeak__private_IsEnabledDeviceUsage+0x21
04dbe4bc 77923802 gdi32!InternalDeleteObject+0x113
04dbe4cc 779f34ba gdi32!DeleteObject+0x32
04dbe5c8 779f3d18 gdi32full!CacheFontLinkingData+0x367
04dbe5e8 779f40ad gdi32full!IsFontRegLinked+0x28
04dbeb90 779e9ceb gdi32full!LoadFont+0x29e
04dbebb4 779e9e42 gdi32full!FindOrCreateFaceCache+0xc7
04dbecc0 77988ae5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
04dbf068 779894db gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
04dbf184 7798a873 gdi32full!ScriptStringAnalyse+0x3eb
04dbf338 77988733 gdi32full!LpkCharsetDraw+0xa93
04dbf378 7773f1ab gdi32full!LpkDrawTextEx+0x203
04dbf3dc 7773f0b1 user32!DT_DrawStr+0x69
04dbf434 7773ecae user32!DT_GetLineBreak+0xf8
04dbf504 777ac8fe user32!DrawTextExWorker+0x1c4
04dbf520 70f60fc4 user32!DrawTextExW+0x1e
04dbf584 70f66fba uxtheme!CTextDraw::GetTextExtent+0x109
04dbf5cc 70f587ad uxtheme!GetThemeTextExtent+0x8a
04dbf620 70f268ba uxtheme!_GetNcCaptionTextSize+0x61
04dbf798 70f27bfe uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
04dbf87c 70f2c32f uxtheme!_WindowPosChangedWorker+0x73
04dbf888 70f290e0 uxtheme!OnOwpPostWindowPosChanged+0x1f
04dbf8f0 77734260 uxtheme!ThemePostWndProc+0x340
04dbf9ec 77733cba user32!UserCallWinProcCheckWow+0x4f0
04dbfa50 777410b7 user32!DispatchClientMessage+0xea
04dbfa90 77e5916d user32!__fnINLPWINDOWPOS+0x37
04dbfae0 774f12ac ntdll!KiUserCallbackDispatcher+0x4d
04dbfae4 70f56a2f win32u!NtUserSetWindowPos+0xc
04dbfb10 70f2a478 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04dbfb94 77734208 uxtheme!ThemePreWndProc+0x988
04dbfc90 77732af5 user32!UserCallWinProcCheckWow+0x498
04dbfd0c 77732640 user32!DispatchMessageWorker+0x4a5
04dbfd18 5001f5a1 user32!DispatchMessageW+0x10
04dbfd3c 5001f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04dbfd9c 5002196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04dbfda8 5003ffcb CfgRelayEx!CThread::ThreadProc+0x1f
04dbfde4 76197ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04dbfdf4 77e4c0cb kernel32!BaseThreadInitThunk+0x19
04dbfe4c 77e4c04f ntdll!__RtlUserThreadStart+0x2b
04dbfe5c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
001ff4c0 77372878 ntdll!RtlpLowFragHeapFree+0xc5
001ff4d8 7527c5a4 ntdll!RtlFreeHeap+0x105
001ff4ec 0fd42d01 kernel32!HeapFree+0x14
001ff500 0fd28ca4 CfgRelayEx!_free_base+0x1c
001ff50c 0fd54eb1 CfgRelayEx!operator delete+0xb
001ff534 0fd40f53 CfgRelayEx!ATL::`dynamic atexit destructor for '_AtlBaseModule''+0x477
001ff560 0fd40e31 CfgRelayEx!<lambda_275893d493268fdec8709772e3fcec0e>::operator()+0x89
001ff594 0fd40e7f CfgRelayEx!__crt_seh_guarded_call<int>::operator()<<lambda_995298e7d72eb4c2aab26c0585b3abe5>,<lambda_275893d493268fdec8709772e3fcec0e> &,<lambda_293819299cbf9a7022e18b56a874bb5c> >+0x27
001ff5b4 0fd41158 CfgRelayEx!__acrt_lock_and_call<<lambda_275893d493268fdec8709772e3fcec0e> >+0x24
001ff5c8 0fd40714 CfgRelayEx!_execute_onexit_table+0x17
001ff600 0fd40895 CfgRelayEx!common_exit+0xa1
001ff610 0fd292d7 CfgRelayEx!_cexit+0xb
001ff644 0fd2918f CfgRelayEx!dllmain_crt_process_detach+0x39
001ff650 0fd293df CfgRelayEx!dllmain_crt_dispatch+0x4e
001ff690 0fd2947d CfgRelayEx!dllmain_dispatch+0xaf
001ff6a4 773787bc CfgRelayEx!_DllMainCRTStartup+0x1c
001ff6c4 7737defa ntdll!LdrpCallInitRoutine+0x14
001ff768 7737df95 ntdll!LdrShutdownProcess+0x1aa
001ff77c 7528be6e ntdll!RtlExitUserProcess+0x74
001ff790 010d275a kernel32!ExitProcessStub+0x12
001ff79c 010d26ef srvhost!exit_or_terminate_process+0x40
001ff7d4 010d2895 srvhost!common_exit+0xee
001ff7e8 010c7e90 srvhost!exit+0x11
001ff828 7527ef3c srvhost!__scrt_common_main_seh+0x179
001ff834 7738360c kernel32!BaseThreadInitThunk+0xe
001ff874 773835df ntdll!__RtlUserThreadStart+0x70
001ff88c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0563fbc8 6e74b472 CfgRelayEx!CClientMgr::OnSlowCfgRefresh+0x15d
0563fbe0 6e753390 CfgRelayEx!CClientMgr::OnReceiveMessage+0x42
0563fc3c 6e75320f CfgRelayEx!CChannelImpl::ReceiveThreadImp+0x170
0563fc44 6e76ffcb CfgRelayEx!CChannelImpl::ReceiveThread+0xf
0563fc80 76687ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0563fc90 77a8c0cb kernel32!BaseThreadInitThunk+0x19
0563fce8 77a8c04f ntdll!__RtlUserThreadStart+0x2b
0563fcf8 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
042fe258 77180504 gdi32full!GetFontRealizationInfo+0x15
042fe808 77181066 gdi32full!LoadFont+0x76
042fe82c 771815f0 gdi32full!FindOrCreateFaceCache+0x98
042fe930 77188164 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
042fecd8 77186566 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
042ff144 7718565f gdi32full!ScriptStringAnalyse+0xa16
042ff2dc 77184eb0 gdi32full!LpkCharsetDraw+0x60f
042ff308 757aa6dd gdi32full!LpkDrawTextEx+0x30
042ff364 757aa574 user32!DT_DrawStr+0x5f
042ff3c4 757aa0ab user32!DT_GetLineBreak+0xa2
042ff494 757a9eae user32!DrawTextExWorker+0x1f9
042ff4b0 66fee8ba user32!DrawTextExW+0x1e
042ff514 66fedf54 uxtheme!CTextDraw::GetTextExtent+0xa4
042ff55c 66fe4429 uxtheme!GetThemeTextExtent+0x74
042ff5b0 66ff1167 uxtheme!_GetNcCaptionTextSize+0x61
042ff6a4 66ff2b1c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
042ff750 66ff2bcf uxtheme!_WindowPosChangedWorker+0x7c
042ff75c 66fef735 uxtheme!OnOwpPostWindowPosChanged+0x1f
042ff7ac 757b5203 uxtheme!ThemePostWndProc+0x355
042ff894 757b4dda user32!UserCallWinProcCheckWow+0x363
042ff8f8 757bc267 user32!DispatchClientMessage+0xea
042ff938 7750338d user32!__fnINLPWINDOWPOS+0x37
042ff988 76e8124c ntdll!KiUserCallbackDispatcher+0x4d
042ff98c 6700d7bf win32u!NtUserSetWindowPos+0xc
042ff9b8 66ff02cf uxtheme!OnOwpPreDwmCompositionChanged+0x4f
042ffa14 757b51af uxtheme!ThemePreWndProc+0x43f
042ffafc 757b350a user32!UserCallWinProcCheckWow+0x30f
042ffb70 757b32d0 user32!DispatchMessageWorker+0x22a
042ffb7c 7c01f5a1 user32!DispatchMessageW+0x10
042ffba0 7c01f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
042ffc00 7c02196f CfgRelayEx!CConfigCenterStub::Process+0xa7
042ffc0c 7c03ffcb CfgRelayEx!CThread::ThreadProc+0x1f
042ffc48 76bcf989 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
042ffc58 774f5de4 kernel32!BaseThreadInitThunk+0x19
042ffcb4 774f5db4 ntdll!__RtlUserThreadStart+0x2f
042ffcc4 00000000 ntdll!_RtlUserThreadStart+0x1b