Crash in textshaping, Analyzed 2 dumps, total processed 607, rate equals 0.33%

Top 1: Version = v10.1125.1030.411, Total count = 1

dump count = 1

ChildEBP RetAddr  
06c5e154 71591851 TextShaping!ApplyFeatures+0x17
06c5e1d8 7157e11d TextShaping!SubstituteOtlGlyphs+0x181
06c5e200 7157a28b TextShaping!ShapingLibraryInternal::SubstituteOtlGlyphsWithFallback+0x1d
06c5e49c 7156cb96 TextShaping!GenericEngineGetGlyphs+0x79b
06c5e568 76cfc3e0 TextShaping!ShapingGetGlyphs+0x356
06c5e69c 76cfb8a8 gdi32full!ShlShapeOT+0x1c0
06c5e6f0 76cfada9 gdi32full!ScriptShape+0x148
06c5e768 76cfa4d9 gdi32full!RenderItemNoFallback+0x5f9
06c5e7a0 76cfa398 gdi32full!RenderItemWithFallback+0x119
06c5e7c8 76cfa11e gdi32full!RenderItem+0x28
06c5e820 76cf74d8 gdi32full!ScriptStringAnalyzeGlyphs+0x1be
06c5ec84 76cf68df gdi32full!ScriptStringAnalyse+0x738
06c5ee34 76cf6130 gdi32full!LpkCharsetDraw+0x60f
06c5ee60 75f69f1d gdi32full!LpkDrawTextEx+0x30
06c5eebc 75f69db4 user32!DT_DrawStr+0x5f
06c5ef1c 75f698eb user32!DT_GetLineBreak+0xa2
06c5efec 75f696ee user32!DrawTextExWorker+0x1f9
06c5f008 753ae8ba user32!DrawTextExW+0x1e
06c5f06c 753adf54 uxtheme!CTextDraw::GetTextExtent+0xa4
06c5f0b4 753a4429 uxtheme!GetThemeTextExtent+0x74
06c5f108 753b1167 uxtheme!_GetNcCaptionTextSize+0x61
06c5f1fc 753b2b1c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
06c5f2a8 753b2bcf uxtheme!_WindowPosChangedWorker+0x7c
06c5f2b4 753af735 uxtheme!OnOwpPostWindowPosChanged+0x1f
06c5f304 75f74723 uxtheme!ThemePostWndProc+0x355
06c5f3ec 75f742fa user32!UserCallWinProcCheckWow+0x363
06c5f450 75f7b927 user32!DispatchClientMessage+0xea
06c5f490 77cd357d user32!__fnINLPWINDOWPOS+0x37
06c5f4e0 75ee124c ntdll!KiUserCallbackDispatcher+0x4d
06c5f4e4 753cd7bf win32u!NtUserSetWindowPos+0xc
06c5f510 753b02cf uxtheme!OnOwpPreDwmCompositionChanged+0x4f
06c5f56c 75f746cf uxtheme!ThemePreWndProc+0x43f
06c5f654 75f72a2a user32!UserCallWinProcCheckWow+0x30f
06c5f6c8 75f727f0 user32!DispatchMessageWorker+0x22a
06c5f6d4 596e2ca1 user32!DispatchMessageW+0x10
06c5f6f8 596e2887 PopMgrStub!WTL::CMessageLoop::Run+0xc1
06c5f758 596e4f5f PopMgrStub!CPopMgrStub::Process+0xa7
06c5f764 5977e4e0 PopMgrStub!CThread::ThreadProc+0x1f
06c5f7a0 76fff989 PopMgrStub!thread_start<unsigned int (__stdcall*)(void *)>+0x57
06c5f7b0 77cc7084 kernel32!BaseThreadInitThunk+0x19
06c5f80c 77cc7054 ntdll!__RtlUserThreadStart+0x2f
06c5f81c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 2: Version = v10.1125.1035.417, Total count = 1

dump count = 1

ChildEBP RetAddr  
0587e008 6354cf91 gdi32full!CUspShapingFont::GetFontTable+0x9
0587e034 63572f05 TextShaping!COtlsClient::GetOtlTable+0xb1
0587e06c 63575b35 TextShaping!GetScriptFeatureLookupLists+0xd5
0587e27c 63572171 TextShaping!ApplyFeatures+0xb5
0587e300 6355e523 TextShaping!RePositionOtlGlyphs+0x1a1
0587e330 6355aedc TextShaping!ShapingLibraryInternal::RePositionOtlGlyphsWithFallback+0x23
0587e5f8 6354c5db TextShaping!GenericEngineGetGlyphPositions+0x63c
0587e6fc 762a02c0 TextShaping!ShapingGetGlyphPositions+0x48b
0587e850 7629e9b0 gdi32full!ShlPlaceOT+0x240
0587e8e8 7629e2c9 gdi32full!RenderItemNoFallback+0x410
0587e920 7629e188 gdi32full!RenderItemWithFallback+0x119
0587e948 7629df0e gdi32full!RenderItem+0x28
0587e9a0 7629b2c8 gdi32full!ScriptStringAnalyzeGlyphs+0x1be
0587ee04 7629a68f gdi32full!ScriptStringAnalyse+0x738
0587ef7c 7629aab8 gdi32full!LpkCharsetDraw+0x60f
0587f048 762a2a22 gdi32full!GetTextMetricsW+0x108
0587f07c 75b9cbfb gdi32full!IntersectClipRectImpl+0x42
0587f14c 75b9c9fe user32!DrawTextExWorker+0x1f9
0587f168 742de6ca user32!DrawTextExW+0x1e
0587f1cc 742ddd34 uxtheme!CTextDraw::GetTextExtent+0xa4
0587f214 742d43c9 uxtheme!GetThemeTextExtent+0x74
0587f268 742e0f87 uxtheme!_GetNcCaptionTextSize+0x61
0587f358 742e293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0587f404 742e29ef uxtheme!_WindowPosChangedWorker+0x7c
0587f410 742df545 uxtheme!OnOwpPostWindowPosChanged+0x1f
0587f460 75ba7c83 uxtheme!ThemePostWndProc+0x355
0587f54c 75ba7870 user32!UserCallWinProcCheckWow+0x363
0587f5b0 75baf5e7 user32!DispatchClientMessage+0x190
0587f5f0 775456cd user32!__fnINLPWINDOWPOS+0x37
0587f640 742fd44f ntdll!KiUserCallbackDispatcher+0x4d
0587f66c 742e00ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0587f6c8 75ba7c2f uxtheme!ThemePreWndProc+0x43f
0587f7b4 75ba6500 user32!UserCallWinProcCheckWow+0x30f
0587f830 75ba6030 user32!DispatchMessageWorker+0x4c0
0587f83c 627da8b4 user32!DispatchMessageW+0x10
0587f8b4 627dca6f ConfigCenterStub!CConfigCenterStub::Process+0x114
0587f8c0 627f938b ConfigCenterStub!CThread::ThreadProc+0x1f
0587f8fc 7610fcc9 ConfigCenterStub!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0587f90c 775382ae kernel32!BaseThreadInitThunk+0x19
0587f968 7753827e ntdll!__RtlUserThreadStart+0x2f
0587f978 00000000 ntdll!_RtlUserThreadStart+0x1b