Crash in cfgrelayex, Analyzed 3 dumps, total processed 82, rate equals 3.66%

Top 1: Version = 2.7224.1000.620, Total count = 3

dump count = 1

ChildEBP RetAddr  
0507e348 762b3f6f gdi32full!GetFontRealizationInfo+0x15
0507e8f8 762b4d9c gdi32full!LoadFont+0x76
0507e91c 762b5893 gdi32full!FindOrCreateFaceCache+0x98
0507ea20 762bb4bb gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0507ee84 762ba68f gdi32full!ScriptStringAnalyse+0x92b
0507f00c 762b9ee0 gdi32full!LpkCharsetDraw+0x60f
0507f038 765ed2bd gdi32full!LpkDrawTextEx+0x30
0507f094 765ed154 user32!DT_DrawStr+0x5f
0507f0f4 765ecc8b user32!DT_GetLineBreak+0xa2
0507f1c4 765eca8e user32!DrawTextExWorker+0x1f9
0507f1e0 749be6ca user32!DrawTextExW+0x1e
0507f244 749bdd34 uxtheme!CTextDraw::GetTextExtent+0xa4
0507f28c 749b43c9 uxtheme!GetThemeTextExtent+0x74
0507f2e0 749c0f87 uxtheme!_GetNcCaptionTextSize+0x61
0507f3d0 749c293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0507f47c 749c29ef uxtheme!_WindowPosChangedWorker+0x7c
0507f488 749bf545 uxtheme!OnOwpPostWindowPosChanged+0x1f
0507f4d8 765f7d03 uxtheme!ThemePostWndProc+0x355
0507f5c4 765f78f0 user32!UserCallWinProcCheckWow+0x363
0507f628 765ff657 user32!DispatchClientMessage+0x190
0507f668 779556cd user32!__fnINLPWINDOWPOS+0x37
0507f6b8 7600124c ntdll!KiUserCallbackDispatcher+0x4d
0507f6bc 749dd44f win32u!NtUserSetWindowPos+0xc
0507f6e8 749c00ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0507f744 765f7caf uxtheme!ThemePreWndProc+0x43f
0507f830 765f6580 user32!UserCallWinProcCheckWow+0x30f
0507f8ac 765f60b0 user32!DispatchMessageWorker+0x4c0
0507f8b8 612924f1 user32!DispatchMessageW+0x10
0507f8dc 61292247 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0507f93c 612948bf CfgRelayEx!CConfigCenterStub::Process+0xa7
0507f948 612bb53b CfgRelayEx!CThread::ThreadProc+0x1f
0507f984 7581fcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0507f994 779482ae kernel32!BaseThreadInitThunk+0x19
0507f9f0 7794827e ntdll!__RtlUserThreadStart+0x2f
0507fa00 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

04d7fe18 760e386d CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04d7fe24 77ae96f2 kernel32!BaseThreadInitThunk+0xe
04d7fe64 77ae96c5 ntdll!__RtlUserThreadStart+0x70
04d7fe7c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0391e040 76e6600c gdi32full!pcfLocateCFONT+0x8
0391e3c0 76e62f2a gdi32full!GetFontRealizationInfo+0xdc
0391e3f0 76e62cae gdi32full!GdiRealizationInfo+0x2a
0391e4ac 76e61fff gdi32full!GetFaceAndSizeMetrics+0x5e
0391e5b0 76e69404 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x35
0391e958 76e67806 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
0391edc4 76e668ff gdi32full!ScriptStringAnalyse+0xa16
0391ef7c 76e66150 gdi32full!LpkCharsetDraw+0x60f
0391efa8 76b7f10d gdi32full!LpkDrawTextEx+0x30
0391f004 76b7efa4 user32!DT_DrawStr+0x5f
0391f064 76b7eadb user32!DT_GetLineBreak+0xa2
0391f134 76b7e8de user32!DrawTextExWorker+0x1f9
0391f150 707ae77a user32!DrawTextExW+0x1e
0391f1b4 707ade14 uxtheme!CTextDraw::GetTextExtent+0xa4
0391f1fc 707a43e9 uxtheme!GetThemeTextExtent+0x74
0391f250 707b1027 uxtheme!_GetNcCaptionTextSize+0x61
0391f344 707b29dc uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0391f3f0 707b2a8f uxtheme!_WindowPosChangedWorker+0x7c
0391f3fc 707af5f5 uxtheme!OnOwpPostWindowPosChanged+0x1f
0391f44c 76b8a1a3 uxtheme!ThemePostWndProc+0x355
0391f534 76b89d7a user32!UserCallWinProcCheckWow+0x363
0391f598 76b911b7 user32!DispatchClientMessage+0xea
0391f5d8 77004e9d user32!__fnINLPWINDOWPOS+0x37
0391f628 7662124c ntdll!KiUserCallbackDispatcher+0x4d
0391f62c 707cde9f win32u!NtUserSetWindowPos+0xc
0391f658 707b018f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0391f6b4 76b8a14f uxtheme!ThemePreWndProc+0x43f
0391f79c 76b87eea user32!UserCallWinProcCheckWow+0x30f
0391f810 76b87cb0 user32!DispatchMessageWorker+0x22a
0391f81c 7abef5a1 user32!DispatchMessageW+0x10
0391f840 7abef2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0391f8a0 7abf196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0391f8ac 7ac0ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0391f8e8 7515fa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0391f8f8 76ff7a9e kernel32!BaseThreadInitThunk+0x19
0391f954 76ff7a6e ntdll!__RtlUserThreadStart+0x2f
0391f964 00000000 ntdll!_RtlUserThreadStart+0x1b