Crash in cfgrelay, Analyzed 2 dumps, total processed 82, rate equals 2.44%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
0405fa84 0f3b5c0f CfgRelay!CChannelImpl::ReceiveThreadImp+0x1bc
0405fa8c 0f3f8cc3 CfgRelay!CChannelImpl::ReceiveThread+0xf
0405fac8 7570347d CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0405fad4 77c59762 kernel32!BaseThreadInitThunk+0xe
0405fb14 77c59735 ntdll!__RtlUserThreadStart+0x70
0405fb2c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
03bcf990 7790ef04 ntdll!RtlpInsertFreeBlock+0x430
03bcf9d0 778f440f ntdll!RtlpDeCommitFreeBlock+0x9a
03bcfac8 778f2c05 ntdll!RtlpFreeHeap+0x214
03bcfae8 756698cd ntdll!RtlFreeHeap+0x142
03bcfb34 7566a941 msvcrt!free+0xcd
03bcfb68 778f93c5 msvcrt!_freefls+0x12a
03bcfb84 7791216f ntdll!RtlProcessFlsData+0x57
03bcfc1c 77912403 ntdll!LdrShutdownThread+0x35
03bcfc2c 766219e8 ntdll!RtlExitUserThread+0x2a
03bcfc40 75b5d5f2 KERNELBASE!FreeLibraryAndExitThread+0x5f
03bcfc50 0f988d76 kernel32!FreeLibraryAndExitThreadStub+0x10
03bcfc64 0f988e52 CfgRelay!common_end_thread+0x56
03bcfc70 0f988cc8 CfgRelay!_endthreadex+0xd
03bcfcac 75b4344d CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x5c
03bcfcb8 778f9802 kernel32!BaseThreadInitThunk+0xe
03bcfcf8 778f97d5 ntdll!__RtlUserThreadStart+0x70
03bcfd10 00000000 ntdll!_RtlUserThreadStart+0x1b