Crash in cfgrelayex, Analyzed 3 dumps, total processed 111, rate equals 2.70%

Top 1: Version = 2.7224.1000.620, Total count = 3

dump count = 1

ChildEBP RetAddr  
0037f4f0 7725e0c3 ntdll!RtlpLowFragHeapFree+0xc5
0037f508 768914ad ntdll!RtlFreeHeap+0x105
0037f51c 542cac02 kernel32!HeapFree+0x14
0037f538 542cabd2 CfgRelayEx!ATL::CWin32Heap::Free+0x22
0037f548 542eab0a CfgRelayEx!ATL::CAtlStringMgr::Free+0x22
0037f560 54304d63 CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x3a
0037f584 542f0f53 CfgRelayEx!ATL::`dynamic atexit destructor for '_AtlBaseModule''+0x329
0037f5b0 542f0e31 CfgRelayEx!<lambda_275893d493268fdec8709772e3fcec0e>::operator()+0x89
0037f5e4 542f0e7f CfgRelayEx!__crt_seh_guarded_call<int>::operator()<<lambda_995298e7d72eb4c2aab26c0585b3abe5>,<lambda_275893d493268fdec8709772e3fcec0e> &,<lambda_293819299cbf9a7022e18b56a874bb5c> >+0x27
0037f604 542f1158 CfgRelayEx!__acrt_lock_and_call<<lambda_275893d493268fdec8709772e3fcec0e> >+0x24
0037f618 542f0714 CfgRelayEx!_execute_onexit_table+0x17
0037f650 542f0895 CfgRelayEx!common_exit+0xa1
0037f660 542d92d7 CfgRelayEx!_cexit+0xb
0037f694 542d918f CfgRelayEx!dllmain_crt_process_detach+0x39
0037f6a0 542d93df CfgRelayEx!dllmain_crt_dispatch+0x4e
0037f6e0 542d947d CfgRelayEx!dllmain_dispatch+0xaf
0037f6f4 77269264 CfgRelayEx!_DllMainCRTStartup+0x1c
0037f714 77288fa8 ntdll!LdrpCallInitRoutine+0x14
0037f7b8 77288e4a ntdll!LdrShutdownProcess+0x1aa
0037f7cc 76897a3c ntdll!RtlExitUserProcess+0x74
0037f7e0 00b2275a kernel32!ExitProcessStub+0x12
0037f7ec 00b226ef srvhost!exit_or_terminate_process+0x40
0037f824 00b22895 srvhost!common_exit+0xee
0037f838 00b17e90 srvhost!exit+0x11
0037f878 7689343d srvhost!__scrt_common_main_seh+0x179
0037f884 77269802 kernel32!BaseThreadInitThunk+0xe
0037f8c4 772697d5 ntdll!__RtlUserThreadStart+0x70
0037f8dc 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
003bf3bc 7769e143 ntdll!RtlpLowFragHeapFree+0xc5
003bf3d4 76ec14bd ntdll!RtlFreeHeap+0x105
003bf3e8 77f02d01 kernel32!HeapFree+0x14
003bf3fc 77f0b21e CfgRelayEx!_free_base+0x1c
003bf414 77f0b52e CfgRelayEx!free_crt_array_internal+0x2e
003bf464 77f08c3a CfgRelayEx!__acrt_locale_free_time+0x85
003bf474 77f08b7e CfgRelayEx!__acrt_locale_free_lc_time_if_unreferenced+0x25
003bf490 77f02b55 CfgRelayEx!__acrt_free_locale+0xdc
003bf4a0 77f028d2 CfgRelayEx!replace_current_thread_locale_nolock+0x36
003bf4d8 77f029b0 CfgRelayEx!__crt_seh_guarded_call<void>::operator()<<lambda_5b71d36f03204c0beab531769a5b5694>,<lambda_be2b3da3f62db62e9dad5dc70221a656> &,<lambda_8f9ce462984622f9bf76b59e2aaaf805> >+0x29
003bf4f8 77f02b18 CfgRelayEx!__acrt_lock_and_call<<lambda_be2b3da3f62db62e9dad5dc70221a656> >+0x24
003bf538 77f02a68 CfgRelayEx!destroy_ptd+0xa2
003bf544 776bfb85 CfgRelayEx!destroy_fls+0x13
003bf564 75c04008 ntdll!RtlFlsFree+0xa0
003bf570 77f06c1b KERNELBASE!FlsFree+0xe
003bf584 77f02cdb CfgRelayEx!__acrt_FlsFree+0x3d
003bf58c 77f012f7 CfgRelayEx!__acrt_uninitialize_ptd+0x10
003bf598 77ee8dfd CfgRelayEx!__acrt_uninitialize_critical+0xd
003bf5a0 77ee931e CfgRelayEx!__scrt_dllmain_uninitialize_critical+0x7
003bf5a4 77ee92f4 CfgRelayEx!dllmain_crt_process_detach+0x80
003bf5d8 77ee918f CfgRelayEx!dllmain_crt_process_detach+0x56
003bf5e4 77ee93df CfgRelayEx!dllmain_crt_dispatch+0x4e
003bf624 77ee947d CfgRelayEx!dllmain_dispatch+0xaf
003bf638 776a92c0 CfgRelayEx!_DllMainCRTStartup+0x1c
003bf658 776bf567 ntdll!LdrpCallInitRoutine+0x14
003bf6fc 776bf409 ntdll!LdrShutdownProcess+0x1aa
003bf710 76ec7a7c ntdll!RtlExitUserProcess+0x74
003bf724 00b6275a kernel32!ExitProcessStub+0x12
003bf730 00b626ef srvhost!exit_or_terminate_process+0x40
003bf768 00b62895 srvhost!common_exit+0xee
003bf77c 00b57e90 srvhost!exit+0x11
003bf7bc 76ec347d srvhost!__scrt_common_main_seh+0x179
003bf7c8 776a9852 kernel32!BaseThreadInitThunk+0xe
003bf808 776a9825 ntdll!__RtlUserThreadStart+0x70
003bf820 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04ebe1a0 771f1f6f gdi32full!GetFontRealizationInfo+0x1c
04ebe750 771e7e0b gdi32full!LoadFont+0x70
04ebe774 771e7f62 gdi32full!FindOrCreateFaceCache+0xc7
04ebe880 77186ad5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
04ebec28 771874cb gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
04ebed44 77188863 gdi32full!ScriptStringAnalyse+0x3eb
04ebeec0 77186723 gdi32full!LpkCharsetDraw+0xa93
04ebef00 7574f57b gdi32full!LpkDrawTextEx+0x203
04ebef64 7574f481 user32!DT_DrawStr+0x69
04ebefbc 7574f07e user32!DT_GetLineBreak+0xf8
04ebf08c 757bcb2e user32!DrawTextExWorker+0x1c4
04ebf0a8 714c09c4 user32!DrawTextExW+0x1e
04ebf10c 714c69aa uxtheme!CTextDraw::GetTextExtent+0x109
04ebf154 714b81bd uxtheme!GetThemeTextExtent+0x8a
04ebf1a8 7148689a uxtheme!_GetNcCaptionTextSize+0x61
04ebf320 71487bde uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
04ebf404 7148c30f uxtheme!_WindowPosChangedWorker+0x73
04ebf410 714890c0 uxtheme!OnOwpPostWindowPosChanged+0x1f
04ebf478 75744630 uxtheme!ThemePostWndProc+0x340
04ebf574 7574408a user32!UserCallWinProcCheckWow+0x4f0
04ebf5d8 75751487 user32!DispatchClientMessage+0xea
04ebf618 772e91bd user32!__fnINLPWINDOWPOS+0x37
04ebf668 76e412ac ntdll!KiUserCallbackDispatcher+0x4d
04ebf66c 714b643f win32u!NtUserSetWindowPos+0xc
04ebf698 7148a458 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04ebf718 757445d8 uxtheme!ThemePreWndProc+0x988
04ebf814 75742ec5 user32!UserCallWinProcCheckWow+0x498
04ebf890 75742a10 user32!DispatchMessageWorker+0x4a5
04ebf89c 77ebf5a1 user32!DispatchMessageW+0x10
04ebf8c0 77ebf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04ebf920 77ec196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04ebf92c 77edffcb CfgRelayEx!CThread::ThreadProc+0x1f
04ebf968 76c57ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04ebf978 772dc11b kernel32!BaseThreadInitThunk+0x19
04ebf9d0 772dc09f ntdll!__RtlUserThreadStart+0x2b
04ebf9e0 00000000 ntdll!_RtlUserThreadStart+0x1b