Crash in cfgrelayex, Analyzed 2 dumps, total processed 92, rate equals 2.17%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
0407e2bc 74a350a4 gdi32full!bGetRealizationInfoInternal+0x15
0407e2e8 74a43a59 gdi32full!GetFontRealizationInfo+0xb4
0407e890 74a5782f gdi32full!LoadFont+0x69
0407e8b4 74a56b98 gdi32full!FindOrCreateFaceCache+0x8e
0407e9b8 74a3bf03 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x77
0407ed48 74a3c2ef gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x283
0407ee3c 74a4bf18 gdi32full!ScriptStringAnalyse+0x39f
0407eeb0 77652ab7 gdi32full!GetObjectType+0xf8
0407f074 75837477 ntdll!RtlpAllocateHeap+0x9c7
0407f0d4 75836e8e user32!DT_GetLineBreak+0xa2
0407f19c 75836c3e user32!DrawTextExWorker+0x1e9
0407f1b8 72c50de4 user32!DrawTextExW+0x1e
0407f224 72c47872 uxtheme!CTextDraw::GetTextExtent+0xa1
0407f298 72c49dac uxtheme!_GetNcCaptionTextSize+0x132
0407f6c0 72c4611f uxtheme!CThemeWnd::GetNcWindowMetrics+0xc3c
0407f76c 72c4609f uxtheme!_WindowPosChangedWorker+0x77
0407f778 72c4cdc5 uxtheme!OnOwpPostWindowPosChanged+0x1f
0407f7d0 758427b1 uxtheme!ThemePostWndProc+0x445
0407f8ac 7584238f user32!UserCallWinProcCheckWow+0x3c1
0407f90c 7584fa5a user32!DispatchClientMessage+0xaf
0407f93c 776a153d user32!__fnINLPWINDOWPOS+0x3a
0407f988 72c5e25f ntdll!KiUserCallbackDispatcher+0x4d
0407f9b4 72c4d51c uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0407fa14 7584278c uxtheme!ThemePreWndProc+0x60c
0407faf0 75842197 user32!UserCallWinProcCheckWow+0x39c
0407fb58 75841ff0 user32!DispatchMessageWorker+0x197
0407fb64 0fbcf5a1 user32!DispatchMessageW+0x10
0407fb88 0fbcf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0407fbe8 0fbd196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0407fbf4 0fbeffcb CfgRelayEx!CThread::ThreadProc+0x1f
0407fc30 75de9564 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0407fc44 7767293c kernel32!BaseThreadInitThunk+0x24
0407fc8c 77672910 ntdll!__RtlUserThreadStart+0x2b
0407fc9c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0401e17c 772e6e3c ntdll!RtlpAllocateHeap+0x1e
0401e218 772e5dde ntdll!RtlpAllocateHeapInternal+0x104c
0401e234 76983bd5 ntdll!RtlAllocateHeap+0x3e
0401e36c 7698313d KERNELBASE!LocalBaseRegEnumValue+0x2a3
0401e3e8 754a008c KERNELBASE!RegEnumValueW+0xcd
0401e500 7549f8f1 gdi32full!CacheFontLinkingData+0x1c8
0401e520 754a2144 gdi32full!IsFontRegLinked+0x28
0401eac8 754a29e6 gdi32full!LoadFont+0x336
0401eaec 754a3209 gdi32full!FindOrCreateFaceCache+0x98
0401ebf0 754aa5c4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0401ef98 754a89c6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
0401f404 754a7abf gdi32full!ScriptStringAnalyse+0xa16
0401f57c 754a7ee8 gdi32full!LpkCharsetDraw+0x60f
0401f648 754af882 gdi32full!GetTextMetricsW+0x108
0401f67c 7670ec8b gdi32full!IntersectClipRectImpl+0x42
0401f74c 7670ea8e user32!DrawTextExWorker+0x1f9
0401f768 6a4ae77a user32!DrawTextExW+0x1e
0401f7cc 6a4ade14 uxtheme!CTextDraw::GetTextExtent+0xa4
0401f814 6a4a43e9 uxtheme!GetThemeTextExtent+0x74
0401f868 6a4b1027 uxtheme!_GetNcCaptionTextSize+0x61
0401f95c 6a4b29dc uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0401fa08 6a4b2a8f uxtheme!_WindowPosChangedWorker+0x7c
0401fa14 6a4af5f5 uxtheme!OnOwpPostWindowPosChanged+0x1f
0401fa64 7671a363 uxtheme!ThemePostWndProc+0x355
0401fb4c 76719f2a user32!UserCallWinProcCheckWow+0x363
0401fbb0 76721377 user32!DispatchClientMessage+0xea
0401fbf0 77314e9d user32!__fnINLPWINDOWPOS+0x37
0401fc40 6a4cde9f ntdll!KiUserCallbackDispatcher+0x4d
0401fc6c 6a4b018f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0401fcc8 7671a30f uxtheme!ThemePreWndProc+0x43f
0401fdb0 7671809a user32!UserCallWinProcCheckWow+0x30f
0401fe24 76717e60 user32!DispatchMessageWorker+0x22a
0401fe30 79e0f5a1 user32!DispatchMessageW+0x10
0401fe54 79e0f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0401feb4 79e1196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0401fec0 79e2ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0401fefc 76f9fa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0401ff0c 77307a9e kernel32!BaseThreadInitThunk+0x19
0401ff68 77307a6e ntdll!__RtlUserThreadStart+0x2f
0401ff78 00000000 ntdll!_RtlUserThreadStart+0x1b