Crash in cfgrelayex, Analyzed 6 dumps, total processed 114, rate equals 5.26%

Top 1: Version = 2.7224.1000.620, Total count = 6

dump count = 2

ChildEBP RetAddr  
042fe258 77180504 gdi32full!GetFontRealizationInfo+0x15
042fe808 77181066 gdi32full!LoadFont+0x76
042fe82c 771815f0 gdi32full!FindOrCreateFaceCache+0x98
042fe930 77188164 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
042fecd8 77186566 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
042ff144 7718565f gdi32full!ScriptStringAnalyse+0xa16
042ff2dc 77184eb0 gdi32full!LpkCharsetDraw+0x60f
042ff308 757aa6dd gdi32full!LpkDrawTextEx+0x30
042ff364 757aa574 user32!DT_DrawStr+0x5f
042ff3c4 757aa0ab user32!DT_GetLineBreak+0xa2
042ff494 757a9eae user32!DrawTextExWorker+0x1f9
042ff4b0 66fee8ba user32!DrawTextExW+0x1e
042ff514 66fedf54 uxtheme!CTextDraw::GetTextExtent+0xa4
042ff55c 66fe4429 uxtheme!GetThemeTextExtent+0x74
042ff5b0 66ff1167 uxtheme!_GetNcCaptionTextSize+0x61
042ff6a4 66ff2b1c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
042ff750 66ff2bcf uxtheme!_WindowPosChangedWorker+0x7c
042ff75c 66fef735 uxtheme!OnOwpPostWindowPosChanged+0x1f
042ff7ac 757b5203 uxtheme!ThemePostWndProc+0x355
042ff894 757b4dda user32!UserCallWinProcCheckWow+0x363
042ff8f8 757bc267 user32!DispatchClientMessage+0xea
042ff938 7750338d user32!__fnINLPWINDOWPOS+0x37
042ff988 76e8124c ntdll!KiUserCallbackDispatcher+0x4d
042ff98c 6700d7bf win32u!NtUserSetWindowPos+0xc
042ff9b8 66ff02cf uxtheme!OnOwpPreDwmCompositionChanged+0x4f
042ffa14 757b51af uxtheme!ThemePreWndProc+0x43f
042ffafc 757b350a user32!UserCallWinProcCheckWow+0x30f
042ffb70 757b32d0 user32!DispatchMessageWorker+0x22a
042ffb7c 7c01f5a1 user32!DispatchMessageW+0x10
042ffba0 7c01f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
042ffc00 7c02196f CfgRelayEx!CConfigCenterStub::Process+0xa7
042ffc0c 7c03ffcb CfgRelayEx!CThread::ThreadProc+0x1f
042ffc48 76bcf989 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
042ffc58 774f5de4 kernel32!BaseThreadInitThunk+0x19
042ffcb4 774f5db4 ntdll!__RtlUserThreadStart+0x2f
042ffcc4 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04fee120 7511433f gdi32full!GetFontRealizationInfo+0x1c
04fee6d0 7510a1bb gdi32full!LoadFont+0x70
04fee6f4 7510a312 gdi32full!FindOrCreateFaceCache+0xc7
04fee800 750a8ae5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
04feeba8 750a94db gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
04feecc4 750aa873 gdi32full!ScriptStringAnalyse+0x3eb
04feee60 750a8733 gdi32full!LpkCharsetDraw+0xa93
04feeea0 771ef11b gdi32full!LpkDrawTextEx+0x203
04feef04 771ef021 user32!DT_DrawStr+0x69
04feef5c 771eec1e user32!DT_GetLineBreak+0xf8
04fef02c 7725c76e user32!DrawTextExWorker+0x1c4
04fef048 65680f64 user32!DrawTextExW+0x1e
04fef0ac 65686f4a uxtheme!CTextDraw::GetTextExtent+0x109
04fef0f4 6567875d uxtheme!GetThemeTextExtent+0x8a
04fef148 656468ba uxtheme!_GetNcCaptionTextSize+0x61
04fef2c0 65647bfe uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
04fef3a4 6564c32f uxtheme!_WindowPosChangedWorker+0x73
04fef3b0 656490e0 uxtheme!OnOwpPostWindowPosChanged+0x1f
04fef418 771e4260 uxtheme!ThemePostWndProc+0x340
04fef514 771e3cb0 user32!UserCallWinProcCheckWow+0x4f0
04fef578 771f1027 user32!DispatchClientMessage+0x190
04fef5b8 773f932d user32!__fnINLPWINDOWPOS+0x37
04fef608 751912ac ntdll!KiUserCallbackDispatcher+0x4d
04fef60c 656769df win32u!NtUserSetWindowPos+0xc
04fef638 6564a478 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04fef6b8 771e4208 uxtheme!ThemePreWndProc+0x988
04fef7b4 771e2a48 user32!UserCallWinProcCheckWow+0x498
04fef830 771e25b0 user32!DispatchMessageWorker+0x488
04fef83c 5321f5a1 user32!DispatchMessageW+0x10
04fef860 5321f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04fef8c0 5322196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04fef8cc 5323ffcb CfgRelayEx!CThread::ThreadProc+0x1f
04fef908 75b57ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04fef918 773ec28b kernel32!BaseThreadInitThunk+0x19
04fef970 773ec20f ntdll!__RtlUserThreadStart+0x2b
04fef980 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
043ae318 76d70ca4 gdi32full!GetFontRealizationInfo+0x15
043ae8c8 76d71806 gdi32full!LoadFont+0x76
043ae8ec 76d72029 gdi32full!FindOrCreateFaceCache+0x98
043ae9f0 76d793f4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
043aed98 76d777f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
043af204 76d768ef gdi32full!ScriptStringAnalyse+0xa16
043af37c 76d76d18 gdi32full!LpkCharsetDraw+0x60f
043af448 76d7e6b2 gdi32full!GetTextMetricsW+0x108
043af47c 74f6ed8b gdi32full!IntersectClipRectImpl+0x42
043af54c 74f6eb8e user32!DrawTextExWorker+0x1f9
043af568 74b7e77a user32!DrawTextExW+0x1e
043af5cc 74b7de14 uxtheme!CTextDraw::GetTextExtent+0xa4
043af614 74b743e9 uxtheme!GetThemeTextExtent+0x74
043af668 74b81027 uxtheme!_GetNcCaptionTextSize+0x61
043af75c 74b829dc uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
043af808 74b82a8f uxtheme!_WindowPosChangedWorker+0x7c
043af814 74b7f5f5 uxtheme!OnOwpPostWindowPosChanged+0x1f
043af864 74f7a453 uxtheme!ThemePostWndProc+0x355
043af94c 74f7a02a user32!UserCallWinProcCheckWow+0x363
043af9b0 74f81467 user32!DispatchClientMessage+0xea
043af9f0 76fc4e9d user32!__fnINLPWINDOWPOS+0x37
043afa40 74b9de9f ntdll!KiUserCallbackDispatcher+0x4d
043afa6c 74b8018f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
043afac8 74f7a3ff uxtheme!ThemePreWndProc+0x43f
043afbb0 74f7819a user32!UserCallWinProcCheckWow+0x30f
043afc24 74f77f60 user32!DispatchMessageWorker+0x22a
043afc30 5008f5a1 user32!DispatchMessageW+0x10
043afc54 5008f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
043afcb4 5009196f CfgRelayEx!CConfigCenterStub::Process+0xa7
043afcc0 500affcb CfgRelayEx!CThread::ThreadProc+0x1f
043afcfc 753ffa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
043afd0c 76fb7a9e kernel32!BaseThreadInitThunk+0x19
043afd68 76fb7a6e ntdll!__RtlUserThreadStart+0x2f
043afd78 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
044ff760 51aaab96 KERNELBASE!RaiseException+0x58
044ff7a4 51a996a3 CfgRelayEx!_CxxThrowException+0x66
044ff7c0 044ff7d0 CfgRelayEx!__scrt_throw_std_bad_alloc+0x1c
WARNING: Frame IP not in any known module. Following frames may be wrong.
044ff7c4 51a8c04c 0x44ff7d0
044ff7d0 51a87417 CfgRelayEx!std::_Default_allocate_traits::_Allocate+0xc
044ff7e8 51a873c5 CfgRelayEx!std::_Allocate_manually_vector_aligned<std::_Default_allocate_traits>+0x27
044ff7f4 51a8cfd9 CfgRelayEx!std::_Allocate<8,std::_Default_allocate_traits,0>+0x15
044ff804 51a88858 CfgRelayEx!std::allocator<char>::allocate+0x19
044ff828 51a8d0ed CfgRelayEx!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::_Reallocate_for<<lambda_9366063389c5f42a00a5088cf24e69de>,char const *>+0x58
044ff84c 51a898aa CfgRelayEx!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::assign+0x7d
044ff864 51a8a3f3 CfgRelayEx!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::operator=+0x5a
044ff874 51a8b5a6 CfgRelayEx!CClient::CacheCfg+0x13
044ff8fc 51a8b472 CfgRelayEx!CClientMgr::OnSlowCfgRefresh+0x126
044ff914 51a93390 CfgRelayEx!CClientMgr::OnReceiveMessage+0x42
044ff970 51a9320f CfgRelayEx!CChannelImpl::ReceiveThreadImp+0x170
044ff978 51aaffcb CfgRelayEx!CChannelImpl::ReceiveThread+0xf
044ff9b4 7541344d CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
044ff9c0 77b19802 kernel32!BaseThreadInitThunk+0xe
044ffa00 77b197d5 ntdll!__RtlUserThreadStart+0x70
044ffa18 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0495e058 768b85ac gdi32full!pcfLocateCFONT+0x67
0495e3d8 768be9ee gdi32full!GetFontRealizationInfo+0xdc
0495e988 768b35ac gdi32full!LoadFont+0x76
0495e9ac 768b40a3 gdi32full!FindOrCreateFaceCache+0x98
0495eab0 768bb9b4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0495ee58 768b9da6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
0495f2c4 768b8e9f gdi32full!ScriptStringAnalyse+0xa16
0495f474 768b86f0 gdi32full!LpkCharsetDraw+0x60f
0495f4a0 76ffce6d gdi32full!LpkDrawTextEx+0x30
0495f4fc 76ffcd04 user32!DT_DrawStr+0x5f
0495f55c 76ffc83b user32!DT_GetLineBreak+0xa2
0495f62c 76ffc63e user32!DrawTextExWorker+0x1f9
0495f648 6fe6e79a user32!DrawTextExW+0x1e
0495f6ac 6fe6de04 uxtheme!CTextDraw::GetTextExtent+0xa4
0495f6f4 6fe643e9 uxtheme!GetThemeTextExtent+0x74
0495f748 6fe71047 uxtheme!_GetNcCaptionTextSize+0x61
0495f83c 6fe729fc uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0495f8e8 6fe72aaf uxtheme!_WindowPosChangedWorker+0x7c
0495f8f4 6fe6f615 uxtheme!OnOwpPostWindowPosChanged+0x1f
0495f944 77007f23 uxtheme!ThemePostWndProc+0x355
0495fa2c 77007afa user32!UserCallWinProcCheckWow+0x363
0495fa90 7700ef27 user32!DispatchClientMessage+0xea
0495fad0 7773508d user32!__fnINLPWINDOWPOS+0x37
0495fb20 6fe8d7df ntdll!KiUserCallbackDispatcher+0x4d
0495fb4c 6fe701af uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0495fba8 77007ecf uxtheme!ThemePreWndProc+0x43f
0495fc90 77005c6a user32!UserCallWinProcCheckWow+0x30f
0495fd04 77005a30 user32!DispatchMessageWorker+0x22a
0495fd10 7b67f5a1 user32!DispatchMessageW+0x10
0495fd34 7b67f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0495fd94 7b68196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0495fda0 7b69ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0495fddc 7599fcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0495fdec 77727c6e kernel32!BaseThreadInitThunk+0x19
0495fe48 77727c3e ntdll!__RtlUserThreadStart+0x2f
0495fe58 00000000 ntdll!_RtlUserThreadStart+0x1b