Crash in cfgrelay, Analyzed 2 dumps, total processed 142, rate equals 1.41%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
05f4f7b4 0f494bf2 CfgRelay!memcpy+0x4e
05f4f7d4 0f4950a2 CfgRelay!Pickle::Pickle+0x62
05f4f7e8 0f48702e CfgRelay!IPC::Message::Message+0x12
05f4f7fc 0f485fcb CfgRelay!std::queue<IPC::Message,std::deque<IPC::Message,std::allocator<IPC::Message> > >::push+0x5e
05f4f810 0f479a13 CfgRelay!CChannelImpl::Send+0x1b
05f4f958 0f475827 CfgRelay!CMainWnd::OnSlowCfgUpdateCallback+0x2f3
05f4f960 0f476b98 CfgRelay!std::_Invoker_pmf_pointer::_Call<void (__thiscall CMainWnd::*)(void),CMainWnd * &>+0x17
05f4f974 0f475642 CfgRelay!std::invoke<void (__thiscall CMainWnd::*&)(void),CMainWnd * &>+0x28
05f4f984 0f4759bf CfgRelay!std::_Invoker_ret<std::_Unforced,0>::_Call<void (__thiscall CMainWnd::*&)(void),CMainWnd * &>+0x22
05f4f994 0f475277 CfgRelay!std::_Call_binder<std::_Unforced,0,void (__thiscall CMainWnd::*)(void),std::tuple<CMainWnd *>,std::tuple<> >+0x2f
05f4f9b8 0f475766 CfgRelay!std::_Binder<std::_Unforced,void (__thiscall CMainWnd::*)(void),CMainWnd *>::operator()<>+0x37
05f4f9c0 0f476c35 CfgRelay!std::_Invoker_functor::_Call<std::_Binder<std::_Unforced,void (__thiscall CMainWnd::*)(void),CMainWnd *> &>+0x16
05f4f9cc 0f475785 CfgRelay!std::invoke<std::_Binder<std::_Unforced,void (__thiscall CMainWnd::*)(void),CMainWnd *> &>+0x15
05f4f9d8 0f47c9d3 CfgRelay!std::_Invoker_ret<void,1>::_Call<std::_Binder<std::_Unforced,void (__thiscall CMainWnd::*)(void),CMainWnd *> &>+0x15
05f4f9e8 0f467785 CfgRelay!std::_Func_impl_no_alloc<std::_Binder<std::_Unforced,void (__thiscall CMainWnd::*)(void),CMainWnd *>,void>::_Do_call+0x13
05f4f9f8 0f46d7d4 CfgRelay!std::_Func_class<void>::operator()+0x35
05f4fa04 0f46b649 CfgRelay!CConfigMgr::SlowConfigCallbackOnUI+0x24
05f4fa10 0f46d78b CfgRelay!mf_bind_t<CConfigMgr,CConfigMgr *,void>::Involk+0x19
05f4fa18 0f48307b CfgRelay!mf_bind_t<CConfigMgr,CConfigMgr *,void>::SimpleInvolk+0xb
05f4fa24 0f47c327 CfgRelay!CUIThreadWindow::ProcessWindowMessage+0x2b
05f4fa80 703f193f CfgRelay!ATL::CWindowImplBaseT<ATL::CWindow,ATL::CWinTraits<1442840576,0> >::WindowProc+0x67
05f4faa0 7565e0bb atlthunk!GetAtlThunkData+0x19c
05f4facc 75668849 user32!_InternalCallWinProc+0x2b
05f4faf0 7566b145 user32!InternalCallWinProc+0x20
05f4fbc0 75658503 user32!UserCallWinProcCheckWow+0x1be
05f4fc28 75658aa0 user32!DispatchClientMessage+0x1b3
05f4fca8 7565b274 user32!__fnDWORD+0x50
05f4fcc4 0f45983b user32!GetMessageW+0x34
05f4fcf4 0f45964b CfgRelay!WTL::CMessageLoop::Run+0x7b
05f4fd50 0f482e5f CfgRelay!CConfigCenterTrayClient::Process+0x8b
05f4fd5c 0f4c8cc3 CfgRelay!CThread::ThreadProc+0x1f
05f4fd98 74108674 CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
05f4fdac 77265e17 kernel32!BaseThreadInitThunk+0x24
05f4fdf4 77265de7 ntdll!__RtlUserThreadStart+0x2f
05f4fe04 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0535f694 761c630a CfgRelay!CChannelImpl::WndProc+0x16
0535f6c0 761c6d4a user32!InternalCallWinProc+0x23
0535f738 761c77d7 user32!UserCallWinProcCheckWow+0x109
0535f798 761c789a user32!DispatchMessageWorker+0x3b5
0535f7a8 6b189881 user32!DispatchMessageW+0xf
0535f7cc 6b18964b CfgRelay!WTL::CMessageLoop::Run+0xc1
0535f828 6b1b2e5f CfgRelay!CConfigCenterTrayClient::Process+0x8b
0535f834 6b1f8cc3 CfgRelay!CThread::ThreadProc+0x1f
0535f870 7697343d CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0535f87c 77129802 kernel32!BaseThreadInitThunk+0xe
0535f8bc 771297d5 ntdll!__RtlUserThreadStart+0x70
0535f8d4 00000000 ntdll!_RtlUserThreadStart+0x1b