Crash in cfgrelayex, Analyzed 2 dumps, total processed 154, rate equals 1.30%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
03e0e000 7799c4da ntdll!RtlpLfhIncrementDataSlot+0x5
03e0e080 7799c09e ntdll!RtlpAllocateHeapInternal+0x42a
03e0e098 763cf6d8 ntdll!RtlAllocateHeap+0x3e
03e0e0b8 763d1da7 ucrtbase!_malloc_base+0x28
03e0e0f0 77381ed4 ucrtbase!__crt_state_management::wrapped_invoke<void * (__cdecl*)(unsigned int),unsigned int,void *>+0x57
03e0e0fc 77389fa9 gdi32full!operator new+0x1c
03e0e128 7738a170 gdi32full!std::_List_node_emplace_op2<std::allocator<std::_List_node<std::pair<unsigned int const ,CFontHead>,void *> > >::_List_node_emplace_op2<std::allocator<std::_List_node<std::pair<unsigned int const ,CFontHead>,void *> > ><std::pair<unsigned int,CFontHead> >+0x25
03e0e168 7738acda gdi32full!std::_Hash<std::_Umap_traits<unsigned int,CFontHead,std::_Uhash_compare<unsigned int,std::hash<unsigned int>,std::equal_to<unsigned int> >,std::allocator<std::pair<unsigned int const ,CFontHead> >,0> >::emplace<std::pair<unsigned int,CFontHead> >+0x4f
03e0e1d4 7738978f gdi32full!InsertCFontCache+0x77
03e0e248 7737cb30 gdi32full!plfCreateLOCALFONT+0xf2
03e0e40c 773e1c16 gdi32full!CreateFontIndirectWImpl+0xc0
03e0e508 773e25a8 gdi32full!CacheFontLinkingData+0x233
03e0e528 773e293d gdi32full!IsFontRegLinked+0x28
03e0ead0 773d85ab gdi32full!LoadFont+0x29e
03e0eaf4 773d8702 gdi32full!FindOrCreateFaceCache+0xc7
03e0ec00 77376a75 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
03e0efa8 7737746b gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
03e0f0c4 77378803 gdi32full!ScriptStringAnalyse+0x3eb
03e0f258 773766c3 gdi32full!LpkCharsetDraw+0xa93
03e0f298 777bf1cb gdi32full!LpkDrawTextEx+0x203
03e0f2fc 777bf0d1 user32!DT_DrawStr+0x69
03e0f354 777becce user32!DT_GetLineBreak+0xf8
03e0f424 7782cc1e user32!DrawTextExWorker+0x1c4
03e0f440 6f2bd236 user32!DrawTextExW+0x1e
03e0f4a4 6f2c321a uxtheme!CTextDraw::GetTextExtent+0x109
03e0f4ec 6f2b4a1d uxtheme!GetThemeTextExtent+0x8a
03e0f540 6f28674a uxtheme!_GetNcCaptionTextSize+0x61
03e0f6bc 6f287a8e uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
03e0f7a0 6f28c1cf uxtheme!_WindowPosChangedWorker+0x73
03e0f7ac 6f288f86 uxtheme!OnOwpPostWindowPosChanged+0x1f
03e0f810 777b42d0 uxtheme!ThemePostWndProc+0x356
03e0f90c 777b3d2a user32!UserCallWinProcCheckWow+0x4f0
03e0f970 777c10d7 user32!DispatchClientMessage+0xea
03e0f9b0 779c8e0d user32!__fnINLPWINDOWPOS+0x37
03e0fa00 770312ac ntdll!KiUserCallbackDispatcher+0x4d
03e0fa04 6f2b2c9f win32u!NtUserSetWindowPos+0xc
03e0fa30 6f28a318 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03e0fab0 777b4278 uxtheme!ThemePreWndProc+0x988
03e0fbac 777b2b65 user32!UserCallWinProcCheckWow+0x498
03e0fc28 777b26b0 user32!DispatchMessageWorker+0x4a5
03e0fc34 5895f5a1 user32!DispatchMessageW+0x10
03e0fc58 5895f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03e0fcb8 5896196f CfgRelayEx!CConfigCenterStub::Process+0xa7
03e0fcc4 5897ffcb CfgRelayEx!CThread::ThreadProc+0x1f
03e0fd00 75777ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03e0fd10 779bbe3b kernel32!BaseThreadInitThunk+0x19
03e0fd68 779bbdbf ntdll!__RtlUserThreadStart+0x2b
03e0fd78 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04f9e298 75891bde gdi32full!GetFontRealizationInfo+0x15
04f9e848 758929fc gdi32full!LoadFont+0x76
04f9e86c 758934f3 gdi32full!FindOrCreateFaceCache+0x98
04f9e970 7589adf4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
04f9ed18 758991f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
04f9f184 758982ef gdi32full!ScriptStringAnalyse+0xa16
04f9f30c 75897b40 gdi32full!LpkCharsetDraw+0x60f
04f9f338 75a8d37d gdi32full!LpkDrawTextEx+0x30
04f9f394 75a8d214 user32!DT_DrawStr+0x5f
04f9f3f4 75a8cd4b user32!DT_GetLineBreak+0xa2
04f9f4c4 75a8cb4e user32!DrawTextExWorker+0x1f9
04f9f4e0 5a9ae6ca user32!DrawTextExW+0x1e
04f9f544 5a9add34 uxtheme!CTextDraw::GetTextExtent+0xa4
04f9f58c 5a9a43c9 uxtheme!GetThemeTextExtent+0x74
04f9f5e0 5a9b0f87 uxtheme!_GetNcCaptionTextSize+0x61
04f9f6d0 5a9b293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
04f9f77c 5a9b29ef uxtheme!_WindowPosChangedWorker+0x7c
04f9f788 5a9af545 uxtheme!OnOwpPostWindowPosChanged+0x1f
04f9f7d8 75a97ff3 uxtheme!ThemePostWndProc+0x355
04f9f8c4 75a97bca user32!UserCallWinProcCheckWow+0x363
04f9f928 75a9fc37 user32!DispatchClientMessage+0xea
04f9f968 777554ed user32!__fnINLPWINDOWPOS+0x37
04f9f9b8 5a9cd44f ntdll!KiUserCallbackDispatcher+0x4d
04f9f9e4 5a9b00ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04f9fa40 75a97f9f uxtheme!ThemePreWndProc+0x43f
04f9fb2c 75a96901 user32!UserCallWinProcCheckWow+0x30f
04f9fba8 75a96420 user32!DispatchMessageWorker+0x4d1
04f9fbb4 79d2f5a1 user32!DispatchMessageW+0x10
04f9fbd8 79d2f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04f9fc38 79d3196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04f9fc44 79d4ffcb CfgRelayEx!CThread::ThreadProc+0x1f
04f9fc80 764efcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04f9fc90 777480ce kernel32!BaseThreadInitThunk+0x19
04f9fcec 7774809e ntdll!__RtlUserThreadStart+0x2f
04f9fcfc 00000000 ntdll!_RtlUserThreadStart+0x1b