Crash in cfgrelayex, Analyzed 2 dumps, total processed 68, rate equals 2.94%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
0357fba4 60d8345d ntdll!RtlInitUnicodeString+0x1b
0357fbec 60d83c0f CfgRelayEx!CChannelImpl::Run+0x3d
0357fbf4 60d9ffcb CfgRelayEx!CChannelImpl::ThreadImpl+0xf
0357fc30 7502343d CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0357fc3c 77399802 kernel32!BaseThreadInitThunk+0xe
0357fc7c 773997d5 ntdll!__RtlUserThreadStart+0x70
0357fc94 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0391e040 76e6600c gdi32full!pcfLocateCFONT+0x8
0391e3c0 76e62f2a gdi32full!GetFontRealizationInfo+0xdc
0391e3f0 76e62cae gdi32full!GdiRealizationInfo+0x2a
0391e4ac 76e61fff gdi32full!GetFaceAndSizeMetrics+0x5e
0391e5b0 76e69404 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x35
0391e958 76e67806 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
0391edc4 76e668ff gdi32full!ScriptStringAnalyse+0xa16
0391ef7c 76e66150 gdi32full!LpkCharsetDraw+0x60f
0391efa8 76b7f10d gdi32full!LpkDrawTextEx+0x30
0391f004 76b7efa4 user32!DT_DrawStr+0x5f
0391f064 76b7eadb user32!DT_GetLineBreak+0xa2
0391f134 76b7e8de user32!DrawTextExWorker+0x1f9
0391f150 707ae77a user32!DrawTextExW+0x1e
0391f1b4 707ade14 uxtheme!CTextDraw::GetTextExtent+0xa4
0391f1fc 707a43e9 uxtheme!GetThemeTextExtent+0x74
0391f250 707b1027 uxtheme!_GetNcCaptionTextSize+0x61
0391f344 707b29dc uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0391f3f0 707b2a8f uxtheme!_WindowPosChangedWorker+0x7c
0391f3fc 707af5f5 uxtheme!OnOwpPostWindowPosChanged+0x1f
0391f44c 76b8a1a3 uxtheme!ThemePostWndProc+0x355
0391f534 76b89d7a user32!UserCallWinProcCheckWow+0x363
0391f598 76b911b7 user32!DispatchClientMessage+0xea
0391f5d8 77004e9d user32!__fnINLPWINDOWPOS+0x37
0391f628 7662124c ntdll!KiUserCallbackDispatcher+0x4d
0391f62c 707cde9f win32u!NtUserSetWindowPos+0xc
0391f658 707b018f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0391f6b4 76b8a14f uxtheme!ThemePreWndProc+0x43f
0391f79c 76b87eea user32!UserCallWinProcCheckWow+0x30f
0391f810 76b87cb0 user32!DispatchMessageWorker+0x22a
0391f81c 7abef5a1 user32!DispatchMessageW+0x10
0391f840 7abef2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0391f8a0 7abf196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0391f8ac 7ac0ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0391f8e8 7515fa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0391f8f8 76ff7a9e kernel32!BaseThreadInitThunk+0x19
0391f954 76ff7a6e ntdll!__RtlUserThreadStart+0x2f
0391f964 00000000 ntdll!_RtlUserThreadStart+0x1b