Crash in cfgrelayex, Analyzed 3 dumps, total processed 75, rate equals 4.00%

Top 1: Version = 2.7224.1000.620, Total count = 3

dump count = 1

ChildEBP RetAddr  
001ce838 0f0cab33 CfgRelayEx!ATL::CAtlStringMgr::Allocate+0x8a
001ce864 0f0cb6a3 CfgRelayEx!ATL::CSimpleStringT<wchar_t,0>::Fork+0x43
001ce87c 0f0cb752 CfgRelayEx!ATL::CSimpleStringT<wchar_t,0>::PrepareWrite2+0x43
001ce898 0f0cad33 CfgRelayEx!ATL::CSimpleStringT<wchar_t,0>::PrepareWrite+0x52
001ce8a8 0f0cbeb5 CfgRelayEx!ATL::CSimpleStringT<wchar_t,0>::GetBuffer+0x13
001ce8c4 0f0cbe50 CfgRelayEx!ATL::CSimpleStringT<wchar_t,0>::SetString+0x55
001ce8d8 0f0c9823 CfgRelayEx!ATL::CSimpleStringT<wchar_t,0>::SetString+0x20
001ce8e8 0f0c9843 CfgRelayEx!ATL::CSimpleStringT<wchar_t,0>::operator=+0x13
001ce8f8 0f0c8f7a CfgRelayEx!ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >::operator=+0x13
001ce918 0f0cbc30 CfgRelayEx!ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >+0x5a
001ceb94 0f0cf38c CfgRelayEx!CClientMgr::RegClient+0xe0
001ceba0 04c04f7c CfgRelayEx!CConfigCenterStub::RegisterClient+0x1c
001cf25c 04c08024 ScrExec!CRunExtentionTrayClient::InitConfigCenter+0xfc
001cf270 001ee31d ScrExec!CRunExtentionTrayClient::Start+0x114
001cf294 001ee84a srvhost!CPluginMgr::StartTpi+0x6d
001cf298 001eb690 srvhost!std::_Func_impl_no_alloc<std::_Binder<std::_Unforced,void (__thiscall CPluginMgr::*)(void),CPluginMgr *>,void,void *>::_Do_call+0xa
001cf338 001eb88c srvhost!CDelayCall::ProcessWindowMessage+0x120
001cf388 7752630a srvhost!ATL::CWindowImplBaseT<ATL::CWindow,ATL::CWinTraits<1442840576,0> >::WindowProc+0x6c
001cf3b4 77526d4a user32!InternalCallWinProc+0x23
001cf42c 775277d7 user32!UserCallWinProcCheckWow+0x109
001cf48c 7752789a user32!DispatchMessageWorker+0x3b5
001cf49c 001ea5ff user32!DispatchMessageW+0xf
001cfaf0 001f7e11 srvhost!main+0x71f
001cfb38 769b344d srvhost!__scrt_common_main_seh+0xfa
001cfb44 77a89722 kernel32!BaseThreadInitThunk+0xe
001cfb84 77a896f5 ntdll!__RtlUserThreadStart+0x70
001cfb9c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0507e348 762b3f6f gdi32full!GetFontRealizationInfo+0x15
0507e8f8 762b4d9c gdi32full!LoadFont+0x76
0507e91c 762b5893 gdi32full!FindOrCreateFaceCache+0x98
0507ea20 762bb4bb gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0507ee84 762ba68f gdi32full!ScriptStringAnalyse+0x92b
0507f00c 762b9ee0 gdi32full!LpkCharsetDraw+0x60f
0507f038 765ed2bd gdi32full!LpkDrawTextEx+0x30
0507f094 765ed154 user32!DT_DrawStr+0x5f
0507f0f4 765ecc8b user32!DT_GetLineBreak+0xa2
0507f1c4 765eca8e user32!DrawTextExWorker+0x1f9
0507f1e0 749be6ca user32!DrawTextExW+0x1e
0507f244 749bdd34 uxtheme!CTextDraw::GetTextExtent+0xa4
0507f28c 749b43c9 uxtheme!GetThemeTextExtent+0x74
0507f2e0 749c0f87 uxtheme!_GetNcCaptionTextSize+0x61
0507f3d0 749c293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0507f47c 749c29ef uxtheme!_WindowPosChangedWorker+0x7c
0507f488 749bf545 uxtheme!OnOwpPostWindowPosChanged+0x1f
0507f4d8 765f7d03 uxtheme!ThemePostWndProc+0x355
0507f5c4 765f78f0 user32!UserCallWinProcCheckWow+0x363
0507f628 765ff657 user32!DispatchClientMessage+0x190
0507f668 779556cd user32!__fnINLPWINDOWPOS+0x37
0507f6b8 7600124c ntdll!KiUserCallbackDispatcher+0x4d
0507f6bc 749dd44f win32u!NtUserSetWindowPos+0xc
0507f6e8 749c00ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0507f744 765f7caf uxtheme!ThemePreWndProc+0x43f
0507f830 765f6580 user32!UserCallWinProcCheckWow+0x30f
0507f8ac 765f60b0 user32!DispatchMessageWorker+0x4c0
0507f8b8 612924f1 user32!DispatchMessageW+0x10
0507f8dc 61292247 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0507f93c 612948bf CfgRelayEx!CConfigCenterStub::Process+0xa7
0507f948 612bb53b CfgRelayEx!CThread::ThreadProc+0x1f
0507f984 7581fcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0507f994 779482ae kernel32!BaseThreadInitThunk+0x19
0507f9f0 7794827e ntdll!__RtlUserThreadStart+0x2f
0507fa00 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
03a3e0c0 74e7956d gdi32full!GetFontRealizationInfo+0x1c
03a3e670 74e7c46d gdi32full!LoadFont+0x70
03a3e694 74e7afad gdi32full!FindOrCreateFaceCache+0x98
03a3e798 74e491cd gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
03a3eb38 74e495b6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x27d
03a3ec44 74e4762a gdi32full!ScriptStringAnalyse+0x3a6
03a3edf4 74e46880 gdi32full!LpkCharsetDraw+0x62a
03a3ee20 74acde42 gdi32full!LpkDrawTextEx+0x30
03a3eeac 74acd83d user32!DT_GetLineBreak+0x122
03a3ef6c 74af320e user32!DrawTextExWorker+0x1ed
03a3ef88 66c1b6c6 user32!DrawTextExW+0x1e
03a3f3e8 66c1de2b uxtheme!CThemeWnd::GetNcWindowMetrics+0x8b6
03a3f494 66c1debf uxtheme!_WindowPosChangedWorker+0x77
03a3f4a0 66c1a525 uxtheme!OnOwpPostWindowPosChanged+0x1f
03a3f4f4 74ad5043 uxtheme!ThemePostWndProc+0x405
03a3f5dc 74ad4b2a user32!UserCallWinProcCheckWow+0x463
03a3f640 74ade9c7 user32!DispatchClientMessage+0xea
03a3f680 76f8428d user32!__fnINLPWINDOWPOS+0x37
03a3f6d0 66c4379f ntdll!KiUserCallbackDispatcher+0x4d
03a3f6fc 66c1ac20 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03a3f758 74ad5016 uxtheme!ThemePreWndProc+0x610
03a3f840 74ad40de user32!UserCallWinProcCheckWow+0x436
03a3f8b4 74ad3ec0 user32!DispatchMessageWorker+0x20e
03a3f8c0 790bf5a1 user32!DispatchMessageW+0x10
03a3f8e4 790bf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03a3f944 790c196f CfgRelayEx!CConfigCenterStub::Process+0xa7
03a3f950 790dffcb CfgRelayEx!CThread::ThreadProc+0x1f
03a3f98c 747d6359 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03a3f99c 76f77c24 kernel32!BaseThreadInitThunk+0x19
03a3f9f8 76f77bf4 ntdll!__RtlUserThreadStart+0x2f
03a3fa08 00000000 ntdll!_RtlUserThreadStart+0x1b